<html><body>
<style>

body, h1, h2, h3, div, span, p, pre, a {
  margin: 0;
  padding: 0;
  border: 0;
  font-weight: inherit;
  font-style: inherit;
  font-size: 100%;
  font-family: inherit;
  vertical-align: baseline;
}

body {
  font-size: 13px;
  padding: 1em;
}

h1 {
  font-size: 26px;
  margin-bottom: 1em;
}

h2 {
  font-size: 24px;
  margin-bottom: 1em;
}

h3 {
  font-size: 20px;
  margin-bottom: 1em;
  margin-top: 1em;
}

pre, code {
  line-height: 1.5;
  font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
}

pre {
  margin-top: 0.5em;
}

h1, h2, h3, p {
  font-family: Arial, sans serif;
}

h1, h2, h3 {
  border-bottom: solid #CCC 1px;
}

.toc_element {
  margin-top: 0.5em;
}

.firstline {
  margin-left: 2 em;
}

.method  {
  margin-top: 1em;
  border: solid 1px #CCC;
  padding: 1em;
  background: #EEE;
}

.details {
  font-weight: bold;
  font-size: 14px;
}

</style>

<h1><a href="storagetransfer_v1.html">Storage Transfer API</a> . <a href="storagetransfer_v1.transferJobs.html">transferJobs</a></h1>
<h2>Instance Methods</h2>
<p class="toc_element">
  <code><a href="#close">close()</a></code></p>
<p class="firstline">Close httplib2 connections.</p>
<p class="toc_element">
  <code><a href="#create">create(body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Creates a transfer job that runs periodically.</p>
<p class="toc_element">
  <code><a href="#delete">delete(jobName, projectId, x__xgafv=None)</a></code></p>
<p class="firstline">Deletes a transfer job. Deleting a transfer job sets its status to DELETED.</p>
<p class="toc_element">
  <code><a href="#get">get(jobName, projectId, x__xgafv=None)</a></code></p>
<p class="firstline">Gets a transfer job.</p>
<p class="toc_element">
  <code><a href="#list">list(filter, pageSize=None, pageToken=None, x__xgafv=None)</a></code></p>
<p class="firstline">Lists transfer jobs.</p>
<p class="toc_element">
  <code><a href="#list_next">list_next()</a></code></p>
<p class="firstline">Retrieves the next page of results.</p>
<p class="toc_element">
  <code><a href="#patch">patch(jobName, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Updates a transfer job. Updating a job's transfer spec does not affect transfer operations that are running already. **Note:** The job's status field can be modified using this RPC (for example, to set a job's status to DELETED, DISABLED, or ENABLED).</p>
<p class="toc_element">
  <code><a href="#run">run(jobName, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Starts a new operation for the specified transfer job. A `TransferJob` has a maximum of one active `TransferOperation`. If this method is called while a `TransferOperation` is active, an error is returned.</p>
<h3>Method Details</h3>
<div class="method">
    <code class="details" id="close">close()</code>
  <pre>Close httplib2 connections.</pre>
</div>

<div class="method">
    <code class="details" id="create">create(body=None, x__xgafv=None)</code>
  <pre>Creates a transfer job that runs periodically.

Args:
  body: object, The request body.
    The object takes the form of:

{ # This resource represents the configuration of a transfer job that runs periodically.
  &quot;creationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was created.
  &quot;deletionTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was deleted.
  &quot;description&quot;: &quot;A String&quot;, # A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.
  &quot;eventStream&quot;: { # Specifies the Event-driven transfer options. Event-driven transfers listen to an event stream to transfer updated files. # Specifies the event stream for the transfer job for event-driven transfers. When EventStream is specified, the Schedule fields are ignored.
    &quot;eventStreamExpirationTime&quot;: &quot;A String&quot;, # Specifies the data and time at which Storage Transfer Service stops listening for events from this stream. After this time, any transfers in progress will complete, but no new transfers are initiated.
    &quot;eventStreamStartTime&quot;: &quot;A String&quot;, # Specifies the date and time that Storage Transfer Service starts listening for events from this stream. If no start time is specified or start time is in the past, Storage Transfer Service starts listening immediately.
    &quot;name&quot;: &quot;A String&quot;, # Required. Specifies a unique name of the resource such as AWS SQS ARN in the form &#x27;arn:aws:sqs:region:account_id:queue_name&#x27;, or Pub/Sub subscription resource name in the form &#x27;projects/{project}/subscriptions/{sub}&#x27;.
  },
  &quot;lastModificationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was last modified.
  &quot;latestOperationName&quot;: &quot;A String&quot;, # The name of the most recently started TransferOperation of this JobConfig. Present if a TransferOperation has been created for this JobConfig.
  &quot;loggingConfig&quot;: { # Specifies the logging behavior for transfer operations. Logs can be sent to Cloud Logging for all transfer types. See [Read transfer logs](https://cloud.google.com/storage-transfer/docs/read-transfer-logs) for details. # Logging configuration.
    &quot;enableOnpremGcsTransferLogs&quot;: True or False, # For PosixFilesystem transfers, enables [file system transfer logs](https://cloud.google.com/storage-transfer/docs/on-prem-transfer-log-format) instead of, or in addition to, Cloud Logging. This option ignores [LoggableAction] and [LoggableActionState]. If these are set, Cloud Logging will also be enabled for this transfer.
    &quot;logActionStates&quot;: [ # States in which `log_actions` are logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
    &quot;logActions&quot;: [ # Specifies the actions to be logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
  },
  &quot;name&quot;: &quot;A String&quot;, # A unique name (within the transfer project) assigned when the job is created. If this field is empty in a CreateTransferJobRequest, Storage Transfer Service assigns a unique name. Otherwise, the specified name is used as the unique name for this job. If the specified name is in use by a job, the creation request fails with an ALREADY_EXISTS error. This name must start with `&quot;transferJobs/&quot;` prefix and end with a letter or a number, and should be no more than 128 characters. For transfers involving PosixFilesystem, this name must start with `transferJobs/OPI` specifically. For all other transfer types, this name must not start with `transferJobs/OPI`. Non-PosixFilesystem example: `&quot;transferJobs/^(?!OPI)[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` PosixFilesystem example: `&quot;transferJobs/OPI^[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` Applications must not rely on the enforcement of naming requirements involving OPI. Invalid job names fail with an INVALID_ARGUMENT error.
  &quot;notificationConfig&quot;: { # Specification to configure notifications published to Pub/Sub. Notifications are published to the customer-provided topic using the following `PubsubMessage.attributes`: * `&quot;eventType&quot;`: one of the EventType values * `&quot;payloadFormat&quot;`: one of the PayloadFormat values * `&quot;projectId&quot;`: the project_id of the `TransferOperation` * `&quot;transferJobName&quot;`: the transfer_job_name of the `TransferOperation` * `&quot;transferOperationName&quot;`: the name of the `TransferOperation` The `PubsubMessage.data` contains a TransferOperation resource formatted according to the specified `PayloadFormat`. # Notification configuration.
    &quot;eventTypes&quot;: [ # Event types for which a notification is desired. If empty, send notifications for all event types.
      &quot;A String&quot;,
    ],
    &quot;payloadFormat&quot;: &quot;A String&quot;, # Required. The desired format of the notification message payloads.
    &quot;pubsubTopic&quot;: &quot;A String&quot;, # Required. The `Topic.name` of the Pub/Sub topic to which to publish notifications. Must be of the format: `projects/{project}/topics/{topic}`. Not matching this format results in an INVALID_ARGUMENT error.
  },
  &quot;projectId&quot;: &quot;A String&quot;, # The ID of the Google Cloud project that owns the job.
  &quot;replicationSpec&quot;: { # Specifies the configuration for a cross-bucket replication job. Cross-bucket replication copies new or updated objects from a source Cloud Storage bucket to a destination Cloud Storage bucket. Existing objects in the source bucket are not copied by a new cross-bucket replication job. # Replication specification.
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket to which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket from which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Object conditions that determine which objects are transferred. For replication jobs, only `include_prefixes` and `exclude_prefixes` are supported.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # Specifies the metadata options to be applied during replication. Delete options are not supported. If a delete option is specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
  &quot;schedule&quot;: { # Transfers can be scheduled to recur or to run just once. # Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule.
    &quot;endTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that no further transfer operations are scheduled. Combined with schedule_end_date, `end_time_of_day` specifies the end date and time for starting new transfer operations. This field must be greater than or equal to the timestamp corresponding to the combination of schedule_start_date and start_time_of_day, and is subject to the following: * If `end_time_of_day` is not set and `schedule_end_date` is set, then a default value of `23:59:59` is used for `end_time_of_day`. * If `end_time_of_day` is set and `schedule_end_date` is not set, then INVALID_ARGUMENT is returned.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
    &quot;repeatInterval&quot;: &quot;A String&quot;, # Interval between the start of each scheduled TransferOperation. If unspecified, the default value is 24 hours. This value may not be less than 1 hour.
    &quot;scheduleEndDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # The last day a transfer runs. Date boundaries are determined relative to UTC time. A job runs once per 24 hours within the following guidelines: * If `schedule_end_date` and schedule_start_date are the same and in the future relative to UTC, the transfer is executed only one time. * If `schedule_end_date` is later than `schedule_start_date` and `schedule_end_date` is in the future relative to UTC, the job runs each day at start_time_of_day through `schedule_end_date`.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;scheduleStartDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # Required. The start date of a transfer. Date boundaries are determined relative to UTC time. If `schedule_start_date` and start_time_of_day are in the past relative to the job&#x27;s creation time, the transfer starts the day after you schedule the transfer request. **Note:** When starting jobs at or near midnight UTC it is possible that a job starts later than expected. For example, if you send an outbound request on June 1 one millisecond prior to midnight UTC and the Storage Transfer Service server receives the request on June 2, then it creates a TransferJob with `schedule_start_date` set to June 2 and a `start_time_of_day` set to midnight UTC. The first scheduled TransferOperation takes place on June 3 at midnight UTC.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;startTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that a transfer job is scheduled to run. Transfers may start later than this time. If `start_time_of_day` is not specified: * One-time transfers run immediately. * Recurring transfers run immediately, and each day at midnight UTC, through schedule_end_date. If `start_time_of_day` is specified: * One-time transfers run at the specified time. * Recurring transfers run at the specified time each day, through `schedule_end_date`.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
  },
  &quot;serviceAccount&quot;: &quot;A String&quot;, # Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.
  &quot;status&quot;: &quot;A String&quot;, # Status of the job. This value MUST be specified for `CreateTransferJobRequests`. **Note:** The effect of the new job status takes place during a subsequent job run. For example, if you change the job status from ENABLED to DISABLED, and an operation spawned by the transfer is running, the status change would not affect the current operation.
  &quot;transferSpec&quot;: { # Configuration for running a transfer. # Transfer specification.
    &quot;awsS3CompatibleDataSource&quot;: { # An AwsS3CompatibleData resource. # Optional. An AWS S3 compatible data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Specifies the name of the bucket.
      &quot;endpoint&quot;: &quot;A String&quot;, # Required. Specifies the endpoint of the storage service.
      &quot;path&quot;: &quot;A String&quot;, # Specifies the root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;region&quot;: &quot;A String&quot;, # Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
      &quot;s3Metadata&quot;: { # S3CompatibleMetadata contains the metadata fields that apply to the basic types of S3-compatible data providers. # A S3 compatible metadata.
        &quot;authMethod&quot;: &quot;A String&quot;, # Specifies the authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
        &quot;listApi&quot;: &quot;A String&quot;, # The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
        &quot;protocol&quot;: &quot;A String&quot;, # Specifies the network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
        &quot;requestModel&quot;: &quot;A String&quot;, # Specifies the API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
      },
    },
    &quot;awsS3DataSource&quot;: { # An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object&#x27;s name is the S3 object&#x27;s key name. # Optional. An AWS S3 data source.
      &quot;awsAccessKey&quot;: { # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)). For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;accessKeyId&quot;: &quot;A String&quot;, # Required. AWS access key ID.
        &quot;secretAccessKey&quot;: &quot;A String&quot;, # Required. AWS secret access key. This field is not returned in RPC responses.
      },
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. S3 Bucket name (see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/dev/create-bucket-get-location-example.html)).
      &quot;cloudfrontDomain&quot;: &quot;A String&quot;, # Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: `https://{id}.cloudfront.net` or any valid custom domain. Must begin with `https://`.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { &quot;access_key_id&quot;: &quot;ACCESS_KEY_ID&quot;, &quot;secret_access_key&quot;: &quot;SECRET_ACCESS_KEY&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Amazon S3] (https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager) for more information. If `credentials_secret` is specified, do not specify role_arn or aws_access_key. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;managedPrivateNetwork&quot;: True or False, # Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;roleArn&quot;: &quot;A String&quot;, # The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.
    },
    &quot;azureBlobStorageDataSource&quot;: { # An AzureBlobStorageData resource can be a data source, but not a data sink. An AzureBlobStorageData resource represents one Azure container. The storage account determines the [Azure endpoint](https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#storage-account-endpoints). In an AzureBlobStorageData resource, a blobs&#x27;s name is the [Azure Blob Storage blob&#x27;s key name](https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata#blob-names). # Optional. An Azure Blob Storage data source.
      &quot;azureCredentials&quot;: { # Azure credentials For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Required. Input only. Credentials used to authenticate API requests to Azure. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;sasToken&quot;: &quot;A String&quot;, # Required. Azure shared access signature (SAS). For more information about SAS, see [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
      },
      &quot;container&quot;: &quot;A String&quot;, # Required. The container to transfer from the Azure Storage account.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. The Azure SAS token must be stored in Secret Manager in JSON format: { &quot;sas_token&quot; : &quot;SAS_TOKEN&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Microsoft Azure Blob Storage] (https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#secret_manager) for more information. If `credentials_secret` is specified, do not specify azure_credentials. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;federatedIdentityConfig&quot;: { # The identity of an Azure application through which Storage Transfer Service can authenticate requests using Azure workload identity federation. Storage Transfer Service can issue requests to Azure Storage through registered Azure applications, eliminating the need to pass credentials to Storage Transfer Service directly. To configure federated identity, see [Configure access to Microsoft Azure Storage](https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#option_3_authenticate_using_federated_identity). # Optional. Federated identity config of a user registered Azure application. If `federated_identity_config` is specified, do not specify azure_credentials or credentials_secret.
        &quot;clientId&quot;: &quot;A String&quot;, # Required. The client (application) ID of the application with federated credentials.
        &quot;tenantId&quot;: &quot;A String&quot;, # Required. The tenant (directory) ID of the application with federated credentials.
      },
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;storageAccount&quot;: &quot;A String&quot;, # Required. The name of the Azure Storage account.
    },
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data sink.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsIntermediateDataLocation&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # For transfers between file systems, specifies a Cloud Storage bucket to be used as an intermediate location through which to transfer data. See [Transfer data between file systems](https://cloud.google.com/storage-transfer/docs/file-to-file) for more information.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;hdfsDataSource&quot;: { # An HdfsData resource specifies a path within an HDFS entity (e.g. a cluster). All cluster-specific settings, such as namenodes and ports, are configured on the transfer agents servicing requests, so HdfsData only contains the root path to the data in our transfer. # Optional. An HDFS cluster data source.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer files.
    },
    &quot;httpDataSource&quot;: { # An HttpData resource specifies a list of objects on the web to be transferred over HTTP. The information of the objects to be transferred is contained in a file referenced by a URL. The first line in the file must be `&quot;TsvHttpData-1.0&quot;`, which specifies the format of the file. Subsequent lines specify the information of the list of objects, one object per list entry. Each entry has the following tab-delimited fields: * **HTTP URL** — The location of the object. * **Length** — The size of the object in bytes. * **MD5** — The base64-encoded MD5 hash of the object. For an example of a valid TSV file, see [Transferring data from URLs](https://cloud.google.com/storage-transfer/docs/create-url-list). When transferring data based on a URL list, keep the following in mind: * When an object located at `http(s)://hostname:port/` is transferred to a data sink, the name of the object at the data sink is `/`. * If the specified size of an object does not match the actual size of the object fetched, the object is not transferred. * If the specified MD5 does not match the MD5 computed from the transferred bytes, the object transfer fails. * Ensure that each URL you specify is publicly accessible. For example, in Cloud Storage you can [share an object publicly] (/storage/docs/cloud-console#_sharingdata) and get a link to it. * Storage Transfer Service obeys `robots.txt` rules and requires the source HTTP server to support `Range` requests and to return a `Content-Length` header in each response. * ObjectConditions have no effect when filtering objects to transfer. # Optional. An HTTP URL data source.
      &quot;listUrl&quot;: &quot;A String&quot;, # Required. The URL that points to the file that stores the object list entries. This file must allow public access. The URL is either an HTTP/HTTPS address (e.g. `https://example.com/urllist.tsv`) or a Cloud Storage path (e.g. `gs://my-bucket/urllist.tsv`).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Only objects that satisfy these object conditions are included in the set of data source and data sink objects. Object conditions based on objects&#x27; &quot;last modification time&quot; do not exclude objects in a data sink.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;posixDataSink&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data sink.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;posixDataSource&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data source.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;sinkAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data sink. When unspecified, the default name is used.
    &quot;sourceAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
    &quot;transferManifest&quot;: { # Specifies where the manifest is located. # A manifest file provides a list of objects to be transferred from the data source. This field points to the location of the manifest file. Otherwise, the entire source bucket is used. ObjectConditions still apply.
      &quot;location&quot;: &quot;A String&quot;, # Specifies the path to the manifest in Cloud Storage. The Google-managed service account for the transfer must have `storage.objects.get` permission for this object. An example path is `gs://bucket_name/path/manifest.csv`.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # If the option delete_objects_unique_in_sink is `true` and time-based object conditions such as &#x27;last modification time&#x27; are specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents the configuration of a transfer job that runs periodically.
  &quot;creationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was created.
  &quot;deletionTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was deleted.
  &quot;description&quot;: &quot;A String&quot;, # A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.
  &quot;eventStream&quot;: { # Specifies the Event-driven transfer options. Event-driven transfers listen to an event stream to transfer updated files. # Specifies the event stream for the transfer job for event-driven transfers. When EventStream is specified, the Schedule fields are ignored.
    &quot;eventStreamExpirationTime&quot;: &quot;A String&quot;, # Specifies the data and time at which Storage Transfer Service stops listening for events from this stream. After this time, any transfers in progress will complete, but no new transfers are initiated.
    &quot;eventStreamStartTime&quot;: &quot;A String&quot;, # Specifies the date and time that Storage Transfer Service starts listening for events from this stream. If no start time is specified or start time is in the past, Storage Transfer Service starts listening immediately.
    &quot;name&quot;: &quot;A String&quot;, # Required. Specifies a unique name of the resource such as AWS SQS ARN in the form &#x27;arn:aws:sqs:region:account_id:queue_name&#x27;, or Pub/Sub subscription resource name in the form &#x27;projects/{project}/subscriptions/{sub}&#x27;.
  },
  &quot;lastModificationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was last modified.
  &quot;latestOperationName&quot;: &quot;A String&quot;, # The name of the most recently started TransferOperation of this JobConfig. Present if a TransferOperation has been created for this JobConfig.
  &quot;loggingConfig&quot;: { # Specifies the logging behavior for transfer operations. Logs can be sent to Cloud Logging for all transfer types. See [Read transfer logs](https://cloud.google.com/storage-transfer/docs/read-transfer-logs) for details. # Logging configuration.
    &quot;enableOnpremGcsTransferLogs&quot;: True or False, # For PosixFilesystem transfers, enables [file system transfer logs](https://cloud.google.com/storage-transfer/docs/on-prem-transfer-log-format) instead of, or in addition to, Cloud Logging. This option ignores [LoggableAction] and [LoggableActionState]. If these are set, Cloud Logging will also be enabled for this transfer.
    &quot;logActionStates&quot;: [ # States in which `log_actions` are logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
    &quot;logActions&quot;: [ # Specifies the actions to be logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
  },
  &quot;name&quot;: &quot;A String&quot;, # A unique name (within the transfer project) assigned when the job is created. If this field is empty in a CreateTransferJobRequest, Storage Transfer Service assigns a unique name. Otherwise, the specified name is used as the unique name for this job. If the specified name is in use by a job, the creation request fails with an ALREADY_EXISTS error. This name must start with `&quot;transferJobs/&quot;` prefix and end with a letter or a number, and should be no more than 128 characters. For transfers involving PosixFilesystem, this name must start with `transferJobs/OPI` specifically. For all other transfer types, this name must not start with `transferJobs/OPI`. Non-PosixFilesystem example: `&quot;transferJobs/^(?!OPI)[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` PosixFilesystem example: `&quot;transferJobs/OPI^[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` Applications must not rely on the enforcement of naming requirements involving OPI. Invalid job names fail with an INVALID_ARGUMENT error.
  &quot;notificationConfig&quot;: { # Specification to configure notifications published to Pub/Sub. Notifications are published to the customer-provided topic using the following `PubsubMessage.attributes`: * `&quot;eventType&quot;`: one of the EventType values * `&quot;payloadFormat&quot;`: one of the PayloadFormat values * `&quot;projectId&quot;`: the project_id of the `TransferOperation` * `&quot;transferJobName&quot;`: the transfer_job_name of the `TransferOperation` * `&quot;transferOperationName&quot;`: the name of the `TransferOperation` The `PubsubMessage.data` contains a TransferOperation resource formatted according to the specified `PayloadFormat`. # Notification configuration.
    &quot;eventTypes&quot;: [ # Event types for which a notification is desired. If empty, send notifications for all event types.
      &quot;A String&quot;,
    ],
    &quot;payloadFormat&quot;: &quot;A String&quot;, # Required. The desired format of the notification message payloads.
    &quot;pubsubTopic&quot;: &quot;A String&quot;, # Required. The `Topic.name` of the Pub/Sub topic to which to publish notifications. Must be of the format: `projects/{project}/topics/{topic}`. Not matching this format results in an INVALID_ARGUMENT error.
  },
  &quot;projectId&quot;: &quot;A String&quot;, # The ID of the Google Cloud project that owns the job.
  &quot;replicationSpec&quot;: { # Specifies the configuration for a cross-bucket replication job. Cross-bucket replication copies new or updated objects from a source Cloud Storage bucket to a destination Cloud Storage bucket. Existing objects in the source bucket are not copied by a new cross-bucket replication job. # Replication specification.
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket to which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket from which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Object conditions that determine which objects are transferred. For replication jobs, only `include_prefixes` and `exclude_prefixes` are supported.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # Specifies the metadata options to be applied during replication. Delete options are not supported. If a delete option is specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
  &quot;schedule&quot;: { # Transfers can be scheduled to recur or to run just once. # Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule.
    &quot;endTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that no further transfer operations are scheduled. Combined with schedule_end_date, `end_time_of_day` specifies the end date and time for starting new transfer operations. This field must be greater than or equal to the timestamp corresponding to the combination of schedule_start_date and start_time_of_day, and is subject to the following: * If `end_time_of_day` is not set and `schedule_end_date` is set, then a default value of `23:59:59` is used for `end_time_of_day`. * If `end_time_of_day` is set and `schedule_end_date` is not set, then INVALID_ARGUMENT is returned.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
    &quot;repeatInterval&quot;: &quot;A String&quot;, # Interval between the start of each scheduled TransferOperation. If unspecified, the default value is 24 hours. This value may not be less than 1 hour.
    &quot;scheduleEndDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # The last day a transfer runs. Date boundaries are determined relative to UTC time. A job runs once per 24 hours within the following guidelines: * If `schedule_end_date` and schedule_start_date are the same and in the future relative to UTC, the transfer is executed only one time. * If `schedule_end_date` is later than `schedule_start_date` and `schedule_end_date` is in the future relative to UTC, the job runs each day at start_time_of_day through `schedule_end_date`.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;scheduleStartDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # Required. The start date of a transfer. Date boundaries are determined relative to UTC time. If `schedule_start_date` and start_time_of_day are in the past relative to the job&#x27;s creation time, the transfer starts the day after you schedule the transfer request. **Note:** When starting jobs at or near midnight UTC it is possible that a job starts later than expected. For example, if you send an outbound request on June 1 one millisecond prior to midnight UTC and the Storage Transfer Service server receives the request on June 2, then it creates a TransferJob with `schedule_start_date` set to June 2 and a `start_time_of_day` set to midnight UTC. The first scheduled TransferOperation takes place on June 3 at midnight UTC.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;startTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that a transfer job is scheduled to run. Transfers may start later than this time. If `start_time_of_day` is not specified: * One-time transfers run immediately. * Recurring transfers run immediately, and each day at midnight UTC, through schedule_end_date. If `start_time_of_day` is specified: * One-time transfers run at the specified time. * Recurring transfers run at the specified time each day, through `schedule_end_date`.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
  },
  &quot;serviceAccount&quot;: &quot;A String&quot;, # Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.
  &quot;status&quot;: &quot;A String&quot;, # Status of the job. This value MUST be specified for `CreateTransferJobRequests`. **Note:** The effect of the new job status takes place during a subsequent job run. For example, if you change the job status from ENABLED to DISABLED, and an operation spawned by the transfer is running, the status change would not affect the current operation.
  &quot;transferSpec&quot;: { # Configuration for running a transfer. # Transfer specification.
    &quot;awsS3CompatibleDataSource&quot;: { # An AwsS3CompatibleData resource. # Optional. An AWS S3 compatible data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Specifies the name of the bucket.
      &quot;endpoint&quot;: &quot;A String&quot;, # Required. Specifies the endpoint of the storage service.
      &quot;path&quot;: &quot;A String&quot;, # Specifies the root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;region&quot;: &quot;A String&quot;, # Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
      &quot;s3Metadata&quot;: { # S3CompatibleMetadata contains the metadata fields that apply to the basic types of S3-compatible data providers. # A S3 compatible metadata.
        &quot;authMethod&quot;: &quot;A String&quot;, # Specifies the authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
        &quot;listApi&quot;: &quot;A String&quot;, # The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
        &quot;protocol&quot;: &quot;A String&quot;, # Specifies the network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
        &quot;requestModel&quot;: &quot;A String&quot;, # Specifies the API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
      },
    },
    &quot;awsS3DataSource&quot;: { # An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object&#x27;s name is the S3 object&#x27;s key name. # Optional. An AWS S3 data source.
      &quot;awsAccessKey&quot;: { # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)). For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;accessKeyId&quot;: &quot;A String&quot;, # Required. AWS access key ID.
        &quot;secretAccessKey&quot;: &quot;A String&quot;, # Required. AWS secret access key. This field is not returned in RPC responses.
      },
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. S3 Bucket name (see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/dev/create-bucket-get-location-example.html)).
      &quot;cloudfrontDomain&quot;: &quot;A String&quot;, # Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: `https://{id}.cloudfront.net` or any valid custom domain. Must begin with `https://`.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { &quot;access_key_id&quot;: &quot;ACCESS_KEY_ID&quot;, &quot;secret_access_key&quot;: &quot;SECRET_ACCESS_KEY&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Amazon S3] (https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager) for more information. If `credentials_secret` is specified, do not specify role_arn or aws_access_key. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;managedPrivateNetwork&quot;: True or False, # Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;roleArn&quot;: &quot;A String&quot;, # The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.
    },
    &quot;azureBlobStorageDataSource&quot;: { # An AzureBlobStorageData resource can be a data source, but not a data sink. An AzureBlobStorageData resource represents one Azure container. The storage account determines the [Azure endpoint](https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#storage-account-endpoints). In an AzureBlobStorageData resource, a blobs&#x27;s name is the [Azure Blob Storage blob&#x27;s key name](https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata#blob-names). # Optional. An Azure Blob Storage data source.
      &quot;azureCredentials&quot;: { # Azure credentials For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Required. Input only. Credentials used to authenticate API requests to Azure. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;sasToken&quot;: &quot;A String&quot;, # Required. Azure shared access signature (SAS). For more information about SAS, see [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
      },
      &quot;container&quot;: &quot;A String&quot;, # Required. The container to transfer from the Azure Storage account.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. The Azure SAS token must be stored in Secret Manager in JSON format: { &quot;sas_token&quot; : &quot;SAS_TOKEN&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Microsoft Azure Blob Storage] (https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#secret_manager) for more information. If `credentials_secret` is specified, do not specify azure_credentials. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;federatedIdentityConfig&quot;: { # The identity of an Azure application through which Storage Transfer Service can authenticate requests using Azure workload identity federation. Storage Transfer Service can issue requests to Azure Storage through registered Azure applications, eliminating the need to pass credentials to Storage Transfer Service directly. To configure federated identity, see [Configure access to Microsoft Azure Storage](https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#option_3_authenticate_using_federated_identity). # Optional. Federated identity config of a user registered Azure application. If `federated_identity_config` is specified, do not specify azure_credentials or credentials_secret.
        &quot;clientId&quot;: &quot;A String&quot;, # Required. The client (application) ID of the application with federated credentials.
        &quot;tenantId&quot;: &quot;A String&quot;, # Required. The tenant (directory) ID of the application with federated credentials.
      },
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;storageAccount&quot;: &quot;A String&quot;, # Required. The name of the Azure Storage account.
    },
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data sink.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsIntermediateDataLocation&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # For transfers between file systems, specifies a Cloud Storage bucket to be used as an intermediate location through which to transfer data. See [Transfer data between file systems](https://cloud.google.com/storage-transfer/docs/file-to-file) for more information.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;hdfsDataSource&quot;: { # An HdfsData resource specifies a path within an HDFS entity (e.g. a cluster). All cluster-specific settings, such as namenodes and ports, are configured on the transfer agents servicing requests, so HdfsData only contains the root path to the data in our transfer. # Optional. An HDFS cluster data source.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer files.
    },
    &quot;httpDataSource&quot;: { # An HttpData resource specifies a list of objects on the web to be transferred over HTTP. The information of the objects to be transferred is contained in a file referenced by a URL. The first line in the file must be `&quot;TsvHttpData-1.0&quot;`, which specifies the format of the file. Subsequent lines specify the information of the list of objects, one object per list entry. Each entry has the following tab-delimited fields: * **HTTP URL** — The location of the object. * **Length** — The size of the object in bytes. * **MD5** — The base64-encoded MD5 hash of the object. For an example of a valid TSV file, see [Transferring data from URLs](https://cloud.google.com/storage-transfer/docs/create-url-list). When transferring data based on a URL list, keep the following in mind: * When an object located at `http(s)://hostname:port/` is transferred to a data sink, the name of the object at the data sink is `/`. * If the specified size of an object does not match the actual size of the object fetched, the object is not transferred. * If the specified MD5 does not match the MD5 computed from the transferred bytes, the object transfer fails. * Ensure that each URL you specify is publicly accessible. For example, in Cloud Storage you can [share an object publicly] (/storage/docs/cloud-console#_sharingdata) and get a link to it. * Storage Transfer Service obeys `robots.txt` rules and requires the source HTTP server to support `Range` requests and to return a `Content-Length` header in each response. * ObjectConditions have no effect when filtering objects to transfer. # Optional. An HTTP URL data source.
      &quot;listUrl&quot;: &quot;A String&quot;, # Required. The URL that points to the file that stores the object list entries. This file must allow public access. The URL is either an HTTP/HTTPS address (e.g. `https://example.com/urllist.tsv`) or a Cloud Storage path (e.g. `gs://my-bucket/urllist.tsv`).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Only objects that satisfy these object conditions are included in the set of data source and data sink objects. Object conditions based on objects&#x27; &quot;last modification time&quot; do not exclude objects in a data sink.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;posixDataSink&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data sink.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;posixDataSource&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data source.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;sinkAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data sink. When unspecified, the default name is used.
    &quot;sourceAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
    &quot;transferManifest&quot;: { # Specifies where the manifest is located. # A manifest file provides a list of objects to be transferred from the data source. This field points to the location of the manifest file. Otherwise, the entire source bucket is used. ObjectConditions still apply.
      &quot;location&quot;: &quot;A String&quot;, # Specifies the path to the manifest in Cloud Storage. The Google-managed service account for the transfer must have `storage.objects.get` permission for this object. An example path is `gs://bucket_name/path/manifest.csv`.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # If the option delete_objects_unique_in_sink is `true` and time-based object conditions such as &#x27;last modification time&#x27; are specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="delete">delete(jobName, projectId, x__xgafv=None)</code>
  <pre>Deletes a transfer job. Deleting a transfer job sets its status to DELETED.

Args:
  jobName: string, Required. The job to delete. (required)
  projectId: string, Required. The ID of the Google Cloud project that owns the job. (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }
}</pre>
</div>

<div class="method">
    <code class="details" id="get">get(jobName, projectId, x__xgafv=None)</code>
  <pre>Gets a transfer job.

Args:
  jobName: string, Required. The job to get. (required)
  projectId: string, Required. The ID of the Google Cloud project that owns the job. (required)
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents the configuration of a transfer job that runs periodically.
  &quot;creationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was created.
  &quot;deletionTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was deleted.
  &quot;description&quot;: &quot;A String&quot;, # A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.
  &quot;eventStream&quot;: { # Specifies the Event-driven transfer options. Event-driven transfers listen to an event stream to transfer updated files. # Specifies the event stream for the transfer job for event-driven transfers. When EventStream is specified, the Schedule fields are ignored.
    &quot;eventStreamExpirationTime&quot;: &quot;A String&quot;, # Specifies the data and time at which Storage Transfer Service stops listening for events from this stream. After this time, any transfers in progress will complete, but no new transfers are initiated.
    &quot;eventStreamStartTime&quot;: &quot;A String&quot;, # Specifies the date and time that Storage Transfer Service starts listening for events from this stream. If no start time is specified or start time is in the past, Storage Transfer Service starts listening immediately.
    &quot;name&quot;: &quot;A String&quot;, # Required. Specifies a unique name of the resource such as AWS SQS ARN in the form &#x27;arn:aws:sqs:region:account_id:queue_name&#x27;, or Pub/Sub subscription resource name in the form &#x27;projects/{project}/subscriptions/{sub}&#x27;.
  },
  &quot;lastModificationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was last modified.
  &quot;latestOperationName&quot;: &quot;A String&quot;, # The name of the most recently started TransferOperation of this JobConfig. Present if a TransferOperation has been created for this JobConfig.
  &quot;loggingConfig&quot;: { # Specifies the logging behavior for transfer operations. Logs can be sent to Cloud Logging for all transfer types. See [Read transfer logs](https://cloud.google.com/storage-transfer/docs/read-transfer-logs) for details. # Logging configuration.
    &quot;enableOnpremGcsTransferLogs&quot;: True or False, # For PosixFilesystem transfers, enables [file system transfer logs](https://cloud.google.com/storage-transfer/docs/on-prem-transfer-log-format) instead of, or in addition to, Cloud Logging. This option ignores [LoggableAction] and [LoggableActionState]. If these are set, Cloud Logging will also be enabled for this transfer.
    &quot;logActionStates&quot;: [ # States in which `log_actions` are logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
    &quot;logActions&quot;: [ # Specifies the actions to be logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
  },
  &quot;name&quot;: &quot;A String&quot;, # A unique name (within the transfer project) assigned when the job is created. If this field is empty in a CreateTransferJobRequest, Storage Transfer Service assigns a unique name. Otherwise, the specified name is used as the unique name for this job. If the specified name is in use by a job, the creation request fails with an ALREADY_EXISTS error. This name must start with `&quot;transferJobs/&quot;` prefix and end with a letter or a number, and should be no more than 128 characters. For transfers involving PosixFilesystem, this name must start with `transferJobs/OPI` specifically. For all other transfer types, this name must not start with `transferJobs/OPI`. Non-PosixFilesystem example: `&quot;transferJobs/^(?!OPI)[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` PosixFilesystem example: `&quot;transferJobs/OPI^[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` Applications must not rely on the enforcement of naming requirements involving OPI. Invalid job names fail with an INVALID_ARGUMENT error.
  &quot;notificationConfig&quot;: { # Specification to configure notifications published to Pub/Sub. Notifications are published to the customer-provided topic using the following `PubsubMessage.attributes`: * `&quot;eventType&quot;`: one of the EventType values * `&quot;payloadFormat&quot;`: one of the PayloadFormat values * `&quot;projectId&quot;`: the project_id of the `TransferOperation` * `&quot;transferJobName&quot;`: the transfer_job_name of the `TransferOperation` * `&quot;transferOperationName&quot;`: the name of the `TransferOperation` The `PubsubMessage.data` contains a TransferOperation resource formatted according to the specified `PayloadFormat`. # Notification configuration.
    &quot;eventTypes&quot;: [ # Event types for which a notification is desired. If empty, send notifications for all event types.
      &quot;A String&quot;,
    ],
    &quot;payloadFormat&quot;: &quot;A String&quot;, # Required. The desired format of the notification message payloads.
    &quot;pubsubTopic&quot;: &quot;A String&quot;, # Required. The `Topic.name` of the Pub/Sub topic to which to publish notifications. Must be of the format: `projects/{project}/topics/{topic}`. Not matching this format results in an INVALID_ARGUMENT error.
  },
  &quot;projectId&quot;: &quot;A String&quot;, # The ID of the Google Cloud project that owns the job.
  &quot;replicationSpec&quot;: { # Specifies the configuration for a cross-bucket replication job. Cross-bucket replication copies new or updated objects from a source Cloud Storage bucket to a destination Cloud Storage bucket. Existing objects in the source bucket are not copied by a new cross-bucket replication job. # Replication specification.
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket to which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket from which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Object conditions that determine which objects are transferred. For replication jobs, only `include_prefixes` and `exclude_prefixes` are supported.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # Specifies the metadata options to be applied during replication. Delete options are not supported. If a delete option is specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
  &quot;schedule&quot;: { # Transfers can be scheduled to recur or to run just once. # Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule.
    &quot;endTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that no further transfer operations are scheduled. Combined with schedule_end_date, `end_time_of_day` specifies the end date and time for starting new transfer operations. This field must be greater than or equal to the timestamp corresponding to the combination of schedule_start_date and start_time_of_day, and is subject to the following: * If `end_time_of_day` is not set and `schedule_end_date` is set, then a default value of `23:59:59` is used for `end_time_of_day`. * If `end_time_of_day` is set and `schedule_end_date` is not set, then INVALID_ARGUMENT is returned.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
    &quot;repeatInterval&quot;: &quot;A String&quot;, # Interval between the start of each scheduled TransferOperation. If unspecified, the default value is 24 hours. This value may not be less than 1 hour.
    &quot;scheduleEndDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # The last day a transfer runs. Date boundaries are determined relative to UTC time. A job runs once per 24 hours within the following guidelines: * If `schedule_end_date` and schedule_start_date are the same and in the future relative to UTC, the transfer is executed only one time. * If `schedule_end_date` is later than `schedule_start_date` and `schedule_end_date` is in the future relative to UTC, the job runs each day at start_time_of_day through `schedule_end_date`.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;scheduleStartDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # Required. The start date of a transfer. Date boundaries are determined relative to UTC time. If `schedule_start_date` and start_time_of_day are in the past relative to the job&#x27;s creation time, the transfer starts the day after you schedule the transfer request. **Note:** When starting jobs at or near midnight UTC it is possible that a job starts later than expected. For example, if you send an outbound request on June 1 one millisecond prior to midnight UTC and the Storage Transfer Service server receives the request on June 2, then it creates a TransferJob with `schedule_start_date` set to June 2 and a `start_time_of_day` set to midnight UTC. The first scheduled TransferOperation takes place on June 3 at midnight UTC.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;startTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that a transfer job is scheduled to run. Transfers may start later than this time. If `start_time_of_day` is not specified: * One-time transfers run immediately. * Recurring transfers run immediately, and each day at midnight UTC, through schedule_end_date. If `start_time_of_day` is specified: * One-time transfers run at the specified time. * Recurring transfers run at the specified time each day, through `schedule_end_date`.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
  },
  &quot;serviceAccount&quot;: &quot;A String&quot;, # Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.
  &quot;status&quot;: &quot;A String&quot;, # Status of the job. This value MUST be specified for `CreateTransferJobRequests`. **Note:** The effect of the new job status takes place during a subsequent job run. For example, if you change the job status from ENABLED to DISABLED, and an operation spawned by the transfer is running, the status change would not affect the current operation.
  &quot;transferSpec&quot;: { # Configuration for running a transfer. # Transfer specification.
    &quot;awsS3CompatibleDataSource&quot;: { # An AwsS3CompatibleData resource. # Optional. An AWS S3 compatible data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Specifies the name of the bucket.
      &quot;endpoint&quot;: &quot;A String&quot;, # Required. Specifies the endpoint of the storage service.
      &quot;path&quot;: &quot;A String&quot;, # Specifies the root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;region&quot;: &quot;A String&quot;, # Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
      &quot;s3Metadata&quot;: { # S3CompatibleMetadata contains the metadata fields that apply to the basic types of S3-compatible data providers. # A S3 compatible metadata.
        &quot;authMethod&quot;: &quot;A String&quot;, # Specifies the authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
        &quot;listApi&quot;: &quot;A String&quot;, # The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
        &quot;protocol&quot;: &quot;A String&quot;, # Specifies the network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
        &quot;requestModel&quot;: &quot;A String&quot;, # Specifies the API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
      },
    },
    &quot;awsS3DataSource&quot;: { # An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object&#x27;s name is the S3 object&#x27;s key name. # Optional. An AWS S3 data source.
      &quot;awsAccessKey&quot;: { # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)). For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;accessKeyId&quot;: &quot;A String&quot;, # Required. AWS access key ID.
        &quot;secretAccessKey&quot;: &quot;A String&quot;, # Required. AWS secret access key. This field is not returned in RPC responses.
      },
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. S3 Bucket name (see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/dev/create-bucket-get-location-example.html)).
      &quot;cloudfrontDomain&quot;: &quot;A String&quot;, # Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: `https://{id}.cloudfront.net` or any valid custom domain. Must begin with `https://`.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { &quot;access_key_id&quot;: &quot;ACCESS_KEY_ID&quot;, &quot;secret_access_key&quot;: &quot;SECRET_ACCESS_KEY&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Amazon S3] (https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager) for more information. If `credentials_secret` is specified, do not specify role_arn or aws_access_key. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;managedPrivateNetwork&quot;: True or False, # Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;roleArn&quot;: &quot;A String&quot;, # The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.
    },
    &quot;azureBlobStorageDataSource&quot;: { # An AzureBlobStorageData resource can be a data source, but not a data sink. An AzureBlobStorageData resource represents one Azure container. The storage account determines the [Azure endpoint](https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#storage-account-endpoints). In an AzureBlobStorageData resource, a blobs&#x27;s name is the [Azure Blob Storage blob&#x27;s key name](https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata#blob-names). # Optional. An Azure Blob Storage data source.
      &quot;azureCredentials&quot;: { # Azure credentials For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Required. Input only. Credentials used to authenticate API requests to Azure. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;sasToken&quot;: &quot;A String&quot;, # Required. Azure shared access signature (SAS). For more information about SAS, see [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
      },
      &quot;container&quot;: &quot;A String&quot;, # Required. The container to transfer from the Azure Storage account.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. The Azure SAS token must be stored in Secret Manager in JSON format: { &quot;sas_token&quot; : &quot;SAS_TOKEN&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Microsoft Azure Blob Storage] (https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#secret_manager) for more information. If `credentials_secret` is specified, do not specify azure_credentials. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;federatedIdentityConfig&quot;: { # The identity of an Azure application through which Storage Transfer Service can authenticate requests using Azure workload identity federation. Storage Transfer Service can issue requests to Azure Storage through registered Azure applications, eliminating the need to pass credentials to Storage Transfer Service directly. To configure federated identity, see [Configure access to Microsoft Azure Storage](https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#option_3_authenticate_using_federated_identity). # Optional. Federated identity config of a user registered Azure application. If `federated_identity_config` is specified, do not specify azure_credentials or credentials_secret.
        &quot;clientId&quot;: &quot;A String&quot;, # Required. The client (application) ID of the application with federated credentials.
        &quot;tenantId&quot;: &quot;A String&quot;, # Required. The tenant (directory) ID of the application with federated credentials.
      },
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;storageAccount&quot;: &quot;A String&quot;, # Required. The name of the Azure Storage account.
    },
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data sink.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsIntermediateDataLocation&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # For transfers between file systems, specifies a Cloud Storage bucket to be used as an intermediate location through which to transfer data. See [Transfer data between file systems](https://cloud.google.com/storage-transfer/docs/file-to-file) for more information.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;hdfsDataSource&quot;: { # An HdfsData resource specifies a path within an HDFS entity (e.g. a cluster). All cluster-specific settings, such as namenodes and ports, are configured on the transfer agents servicing requests, so HdfsData only contains the root path to the data in our transfer. # Optional. An HDFS cluster data source.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer files.
    },
    &quot;httpDataSource&quot;: { # An HttpData resource specifies a list of objects on the web to be transferred over HTTP. The information of the objects to be transferred is contained in a file referenced by a URL. The first line in the file must be `&quot;TsvHttpData-1.0&quot;`, which specifies the format of the file. Subsequent lines specify the information of the list of objects, one object per list entry. Each entry has the following tab-delimited fields: * **HTTP URL** — The location of the object. * **Length** — The size of the object in bytes. * **MD5** — The base64-encoded MD5 hash of the object. For an example of a valid TSV file, see [Transferring data from URLs](https://cloud.google.com/storage-transfer/docs/create-url-list). When transferring data based on a URL list, keep the following in mind: * When an object located at `http(s)://hostname:port/` is transferred to a data sink, the name of the object at the data sink is `/`. * If the specified size of an object does not match the actual size of the object fetched, the object is not transferred. * If the specified MD5 does not match the MD5 computed from the transferred bytes, the object transfer fails. * Ensure that each URL you specify is publicly accessible. For example, in Cloud Storage you can [share an object publicly] (/storage/docs/cloud-console#_sharingdata) and get a link to it. * Storage Transfer Service obeys `robots.txt` rules and requires the source HTTP server to support `Range` requests and to return a `Content-Length` header in each response. * ObjectConditions have no effect when filtering objects to transfer. # Optional. An HTTP URL data source.
      &quot;listUrl&quot;: &quot;A String&quot;, # Required. The URL that points to the file that stores the object list entries. This file must allow public access. The URL is either an HTTP/HTTPS address (e.g. `https://example.com/urllist.tsv`) or a Cloud Storage path (e.g. `gs://my-bucket/urllist.tsv`).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Only objects that satisfy these object conditions are included in the set of data source and data sink objects. Object conditions based on objects&#x27; &quot;last modification time&quot; do not exclude objects in a data sink.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;posixDataSink&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data sink.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;posixDataSource&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data source.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;sinkAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data sink. When unspecified, the default name is used.
    &quot;sourceAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
    &quot;transferManifest&quot;: { # Specifies where the manifest is located. # A manifest file provides a list of objects to be transferred from the data source. This field points to the location of the manifest file. Otherwise, the entire source bucket is used. ObjectConditions still apply.
      &quot;location&quot;: &quot;A String&quot;, # Specifies the path to the manifest in Cloud Storage. The Google-managed service account for the transfer must have `storage.objects.get` permission for this object. An example path is `gs://bucket_name/path/manifest.csv`.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # If the option delete_objects_unique_in_sink is `true` and time-based object conditions such as &#x27;last modification time&#x27; are specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="list">list(filter, pageSize=None, pageToken=None, x__xgafv=None)</code>
  <pre>Lists transfer jobs.

Args:
  filter: string, Required. A list of query parameters specified as JSON text in the form of: ``` { &quot;projectId&quot;:&quot;my_project_id&quot;, &quot;jobNames&quot;:[&quot;jobid1&quot;,&quot;jobid2&quot;,...], &quot;jobStatuses&quot;:[&quot;status1&quot;,&quot;status2&quot;,...], &quot;dataBackend&quot;:&quot;QUERY_REPLICATION_CONFIGS&quot;, &quot;sourceBucket&quot;:&quot;source-bucket-name&quot;, &quot;sinkBucket&quot;:&quot;sink-bucket-name&quot;, } ``` The JSON formatting in the example is for display only; provide the query parameters without spaces or line breaks. * `projectId` is required. * Since `jobNames` and `jobStatuses` support multiple values, their values must be specified with array notation. `jobNames` and `jobStatuses` are optional. Valid values are case-insensitive: * ENABLED * DISABLED * DELETED * Specify `&quot;dataBackend&quot;:&quot;QUERY_REPLICATION_CONFIGS&quot;` to return a list of cross-bucket replication jobs. * Limit the results to jobs from a particular bucket with `sourceBucket` and/or to a particular bucket with `sinkBucket`. (required)
  pageSize: integer, The list page size. The max allowed value is 256.
  pageToken: string, The list page token.
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # Response from ListTransferJobs.
  &quot;nextPageToken&quot;: &quot;A String&quot;, # The list next page token.
  &quot;transferJobs&quot;: [ # A list of transfer jobs.
    { # This resource represents the configuration of a transfer job that runs periodically.
      &quot;creationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was created.
      &quot;deletionTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was deleted.
      &quot;description&quot;: &quot;A String&quot;, # A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.
      &quot;eventStream&quot;: { # Specifies the Event-driven transfer options. Event-driven transfers listen to an event stream to transfer updated files. # Specifies the event stream for the transfer job for event-driven transfers. When EventStream is specified, the Schedule fields are ignored.
        &quot;eventStreamExpirationTime&quot;: &quot;A String&quot;, # Specifies the data and time at which Storage Transfer Service stops listening for events from this stream. After this time, any transfers in progress will complete, but no new transfers are initiated.
        &quot;eventStreamStartTime&quot;: &quot;A String&quot;, # Specifies the date and time that Storage Transfer Service starts listening for events from this stream. If no start time is specified or start time is in the past, Storage Transfer Service starts listening immediately.
        &quot;name&quot;: &quot;A String&quot;, # Required. Specifies a unique name of the resource such as AWS SQS ARN in the form &#x27;arn:aws:sqs:region:account_id:queue_name&#x27;, or Pub/Sub subscription resource name in the form &#x27;projects/{project}/subscriptions/{sub}&#x27;.
      },
      &quot;lastModificationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was last modified.
      &quot;latestOperationName&quot;: &quot;A String&quot;, # The name of the most recently started TransferOperation of this JobConfig. Present if a TransferOperation has been created for this JobConfig.
      &quot;loggingConfig&quot;: { # Specifies the logging behavior for transfer operations. Logs can be sent to Cloud Logging for all transfer types. See [Read transfer logs](https://cloud.google.com/storage-transfer/docs/read-transfer-logs) for details. # Logging configuration.
        &quot;enableOnpremGcsTransferLogs&quot;: True or False, # For PosixFilesystem transfers, enables [file system transfer logs](https://cloud.google.com/storage-transfer/docs/on-prem-transfer-log-format) instead of, or in addition to, Cloud Logging. This option ignores [LoggableAction] and [LoggableActionState]. If these are set, Cloud Logging will also be enabled for this transfer.
        &quot;logActionStates&quot;: [ # States in which `log_actions` are logged. If empty, no logs are generated.
          &quot;A String&quot;,
        ],
        &quot;logActions&quot;: [ # Specifies the actions to be logged. If empty, no logs are generated.
          &quot;A String&quot;,
        ],
      },
      &quot;name&quot;: &quot;A String&quot;, # A unique name (within the transfer project) assigned when the job is created. If this field is empty in a CreateTransferJobRequest, Storage Transfer Service assigns a unique name. Otherwise, the specified name is used as the unique name for this job. If the specified name is in use by a job, the creation request fails with an ALREADY_EXISTS error. This name must start with `&quot;transferJobs/&quot;` prefix and end with a letter or a number, and should be no more than 128 characters. For transfers involving PosixFilesystem, this name must start with `transferJobs/OPI` specifically. For all other transfer types, this name must not start with `transferJobs/OPI`. Non-PosixFilesystem example: `&quot;transferJobs/^(?!OPI)[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` PosixFilesystem example: `&quot;transferJobs/OPI^[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` Applications must not rely on the enforcement of naming requirements involving OPI. Invalid job names fail with an INVALID_ARGUMENT error.
      &quot;notificationConfig&quot;: { # Specification to configure notifications published to Pub/Sub. Notifications are published to the customer-provided topic using the following `PubsubMessage.attributes`: * `&quot;eventType&quot;`: one of the EventType values * `&quot;payloadFormat&quot;`: one of the PayloadFormat values * `&quot;projectId&quot;`: the project_id of the `TransferOperation` * `&quot;transferJobName&quot;`: the transfer_job_name of the `TransferOperation` * `&quot;transferOperationName&quot;`: the name of the `TransferOperation` The `PubsubMessage.data` contains a TransferOperation resource formatted according to the specified `PayloadFormat`. # Notification configuration.
        &quot;eventTypes&quot;: [ # Event types for which a notification is desired. If empty, send notifications for all event types.
          &quot;A String&quot;,
        ],
        &quot;payloadFormat&quot;: &quot;A String&quot;, # Required. The desired format of the notification message payloads.
        &quot;pubsubTopic&quot;: &quot;A String&quot;, # Required. The `Topic.name` of the Pub/Sub topic to which to publish notifications. Must be of the format: `projects/{project}/topics/{topic}`. Not matching this format results in an INVALID_ARGUMENT error.
      },
      &quot;projectId&quot;: &quot;A String&quot;, # The ID of the Google Cloud project that owns the job.
      &quot;replicationSpec&quot;: { # Specifies the configuration for a cross-bucket replication job. Cross-bucket replication copies new or updated objects from a source Cloud Storage bucket to a destination Cloud Storage bucket. Existing objects in the source bucket are not copied by a new cross-bucket replication job. # Replication specification.
        &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket to which to replicate objects.
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
          &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
        },
        &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket from which to replicate objects.
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
          &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
        },
        &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Object conditions that determine which objects are transferred. For replication jobs, only `include_prefixes` and `exclude_prefixes` are supported.
          &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
            &quot;A String&quot;,
          ],
          &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
            &quot;A String&quot;,
          ],
          &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
          &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
          &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
          &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
        },
        &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # Specifies the metadata options to be applied during replication. Delete options are not supported. If a delete option is specified, the request fails with an INVALID_ARGUMENT error.
          &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
          &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
          &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
            &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
            &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
            &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
            &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
            &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
            &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
            &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
            &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
            &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          },
          &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
          &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
        },
      },
      &quot;schedule&quot;: { # Transfers can be scheduled to recur or to run just once. # Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule.
        &quot;endTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that no further transfer operations are scheduled. Combined with schedule_end_date, `end_time_of_day` specifies the end date and time for starting new transfer operations. This field must be greater than or equal to the timestamp corresponding to the combination of schedule_start_date and start_time_of_day, and is subject to the following: * If `end_time_of_day` is not set and `schedule_end_date` is set, then a default value of `23:59:59` is used for `end_time_of_day`. * If `end_time_of_day` is set and `schedule_end_date` is not set, then INVALID_ARGUMENT is returned.
          &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
          &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
          &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
          &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
        },
        &quot;repeatInterval&quot;: &quot;A String&quot;, # Interval between the start of each scheduled TransferOperation. If unspecified, the default value is 24 hours. This value may not be less than 1 hour.
        &quot;scheduleEndDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # The last day a transfer runs. Date boundaries are determined relative to UTC time. A job runs once per 24 hours within the following guidelines: * If `schedule_end_date` and schedule_start_date are the same and in the future relative to UTC, the transfer is executed only one time. * If `schedule_end_date` is later than `schedule_start_date` and `schedule_end_date` is in the future relative to UTC, the job runs each day at start_time_of_day through `schedule_end_date`.
          &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
          &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
          &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
        },
        &quot;scheduleStartDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # Required. The start date of a transfer. Date boundaries are determined relative to UTC time. If `schedule_start_date` and start_time_of_day are in the past relative to the job&#x27;s creation time, the transfer starts the day after you schedule the transfer request. **Note:** When starting jobs at or near midnight UTC it is possible that a job starts later than expected. For example, if you send an outbound request on June 1 one millisecond prior to midnight UTC and the Storage Transfer Service server receives the request on June 2, then it creates a TransferJob with `schedule_start_date` set to June 2 and a `start_time_of_day` set to midnight UTC. The first scheduled TransferOperation takes place on June 3 at midnight UTC.
          &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
          &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
          &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
        },
        &quot;startTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that a transfer job is scheduled to run. Transfers may start later than this time. If `start_time_of_day` is not specified: * One-time transfers run immediately. * Recurring transfers run immediately, and each day at midnight UTC, through schedule_end_date. If `start_time_of_day` is specified: * One-time transfers run at the specified time. * Recurring transfers run at the specified time each day, through `schedule_end_date`.
          &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
          &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
          &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
          &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
        },
      },
      &quot;serviceAccount&quot;: &quot;A String&quot;, # Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.
      &quot;status&quot;: &quot;A String&quot;, # Status of the job. This value MUST be specified for `CreateTransferJobRequests`. **Note:** The effect of the new job status takes place during a subsequent job run. For example, if you change the job status from ENABLED to DISABLED, and an operation spawned by the transfer is running, the status change would not affect the current operation.
      &quot;transferSpec&quot;: { # Configuration for running a transfer. # Transfer specification.
        &quot;awsS3CompatibleDataSource&quot;: { # An AwsS3CompatibleData resource. # Optional. An AWS S3 compatible data source.
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. Specifies the name of the bucket.
          &quot;endpoint&quot;: &quot;A String&quot;, # Required. Specifies the endpoint of the storage service.
          &quot;path&quot;: &quot;A String&quot;, # Specifies the root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
          &quot;region&quot;: &quot;A String&quot;, # Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
          &quot;s3Metadata&quot;: { # S3CompatibleMetadata contains the metadata fields that apply to the basic types of S3-compatible data providers. # A S3 compatible metadata.
            &quot;authMethod&quot;: &quot;A String&quot;, # Specifies the authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
            &quot;listApi&quot;: &quot;A String&quot;, # The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
            &quot;protocol&quot;: &quot;A String&quot;, # Specifies the network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
            &quot;requestModel&quot;: &quot;A String&quot;, # Specifies the API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
          },
        },
        &quot;awsS3DataSource&quot;: { # An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object&#x27;s name is the S3 object&#x27;s key name. # Optional. An AWS S3 data source.
          &quot;awsAccessKey&quot;: { # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)). For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
            &quot;accessKeyId&quot;: &quot;A String&quot;, # Required. AWS access key ID.
            &quot;secretAccessKey&quot;: &quot;A String&quot;, # Required. AWS secret access key. This field is not returned in RPC responses.
          },
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. S3 Bucket name (see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/dev/create-bucket-get-location-example.html)).
          &quot;cloudfrontDomain&quot;: &quot;A String&quot;, # Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: `https://{id}.cloudfront.net` or any valid custom domain. Must begin with `https://`.
          &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { &quot;access_key_id&quot;: &quot;ACCESS_KEY_ID&quot;, &quot;secret_access_key&quot;: &quot;SECRET_ACCESS_KEY&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Amazon S3] (https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager) for more information. If `credentials_secret` is specified, do not specify role_arn or aws_access_key. Format: `projects/{project_number}/secrets/{secret_name}`
          &quot;managedPrivateNetwork&quot;: True or False, # Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
          &quot;roleArn&quot;: &quot;A String&quot;, # The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.
        },
        &quot;azureBlobStorageDataSource&quot;: { # An AzureBlobStorageData resource can be a data source, but not a data sink. An AzureBlobStorageData resource represents one Azure container. The storage account determines the [Azure endpoint](https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#storage-account-endpoints). In an AzureBlobStorageData resource, a blobs&#x27;s name is the [Azure Blob Storage blob&#x27;s key name](https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata#blob-names). # Optional. An Azure Blob Storage data source.
          &quot;azureCredentials&quot;: { # Azure credentials For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Required. Input only. Credentials used to authenticate API requests to Azure. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
            &quot;sasToken&quot;: &quot;A String&quot;, # Required. Azure shared access signature (SAS). For more information about SAS, see [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
          },
          &quot;container&quot;: &quot;A String&quot;, # Required. The container to transfer from the Azure Storage account.
          &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. The Azure SAS token must be stored in Secret Manager in JSON format: { &quot;sas_token&quot; : &quot;SAS_TOKEN&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Microsoft Azure Blob Storage] (https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#secret_manager) for more information. If `credentials_secret` is specified, do not specify azure_credentials. Format: `projects/{project_number}/secrets/{secret_name}`
          &quot;federatedIdentityConfig&quot;: { # The identity of an Azure application through which Storage Transfer Service can authenticate requests using Azure workload identity federation. Storage Transfer Service can issue requests to Azure Storage through registered Azure applications, eliminating the need to pass credentials to Storage Transfer Service directly. To configure federated identity, see [Configure access to Microsoft Azure Storage](https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#option_3_authenticate_using_federated_identity). # Optional. Federated identity config of a user registered Azure application. If `federated_identity_config` is specified, do not specify azure_credentials or credentials_secret.
            &quot;clientId&quot;: &quot;A String&quot;, # Required. The client (application) ID of the application with federated credentials.
            &quot;tenantId&quot;: &quot;A String&quot;, # Required. The tenant (directory) ID of the application with federated credentials.
          },
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
          &quot;storageAccount&quot;: &quot;A String&quot;, # Required. The name of the Azure Storage account.
        },
        &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data sink.
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
          &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
        },
        &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data source.
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
          &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
        },
        &quot;gcsIntermediateDataLocation&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # For transfers between file systems, specifies a Cloud Storage bucket to be used as an intermediate location through which to transfer data. See [Transfer data between file systems](https://cloud.google.com/storage-transfer/docs/file-to-file) for more information.
          &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
          &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
        },
        &quot;hdfsDataSource&quot;: { # An HdfsData resource specifies a path within an HDFS entity (e.g. a cluster). All cluster-specific settings, such as namenodes and ports, are configured on the transfer agents servicing requests, so HdfsData only contains the root path to the data in our transfer. # Optional. An HDFS cluster data source.
          &quot;path&quot;: &quot;A String&quot;, # Root path to transfer files.
        },
        &quot;httpDataSource&quot;: { # An HttpData resource specifies a list of objects on the web to be transferred over HTTP. The information of the objects to be transferred is contained in a file referenced by a URL. The first line in the file must be `&quot;TsvHttpData-1.0&quot;`, which specifies the format of the file. Subsequent lines specify the information of the list of objects, one object per list entry. Each entry has the following tab-delimited fields: * **HTTP URL** — The location of the object. * **Length** — The size of the object in bytes. * **MD5** — The base64-encoded MD5 hash of the object. For an example of a valid TSV file, see [Transferring data from URLs](https://cloud.google.com/storage-transfer/docs/create-url-list). When transferring data based on a URL list, keep the following in mind: * When an object located at `http(s)://hostname:port/` is transferred to a data sink, the name of the object at the data sink is `/`. * If the specified size of an object does not match the actual size of the object fetched, the object is not transferred. * If the specified MD5 does not match the MD5 computed from the transferred bytes, the object transfer fails. * Ensure that each URL you specify is publicly accessible. For example, in Cloud Storage you can [share an object publicly] (/storage/docs/cloud-console#_sharingdata) and get a link to it. * Storage Transfer Service obeys `robots.txt` rules and requires the source HTTP server to support `Range` requests and to return a `Content-Length` header in each response. * ObjectConditions have no effect when filtering objects to transfer. # Optional. An HTTP URL data source.
          &quot;listUrl&quot;: &quot;A String&quot;, # Required. The URL that points to the file that stores the object list entries. This file must allow public access. The URL is either an HTTP/HTTPS address (e.g. `https://example.com/urllist.tsv`) or a Cloud Storage path (e.g. `gs://my-bucket/urllist.tsv`).
        },
        &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Only objects that satisfy these object conditions are included in the set of data source and data sink objects. Object conditions based on objects&#x27; &quot;last modification time&quot; do not exclude objects in a data sink.
          &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
            &quot;A String&quot;,
          ],
          &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
            &quot;A String&quot;,
          ],
          &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
          &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
          &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
          &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
        },
        &quot;posixDataSink&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data sink.
          &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
        },
        &quot;posixDataSource&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data source.
          &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
        },
        &quot;sinkAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data sink. When unspecified, the default name is used.
        &quot;sourceAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
        &quot;transferManifest&quot;: { # Specifies where the manifest is located. # A manifest file provides a list of objects to be transferred from the data source. This field points to the location of the manifest file. Otherwise, the entire source bucket is used. ObjectConditions still apply.
          &quot;location&quot;: &quot;A String&quot;, # Specifies the path to the manifest in Cloud Storage. The Google-managed service account for the transfer must have `storage.objects.get` permission for this object. An example path is `gs://bucket_name/path/manifest.csv`.
        },
        &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # If the option delete_objects_unique_in_sink is `true` and time-based object conditions such as &#x27;last modification time&#x27; are specified, the request fails with an INVALID_ARGUMENT error.
          &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
          &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
          &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
            &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
            &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
            &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
            &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
            &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
            &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
            &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
            &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
            &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          },
          &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
          &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
        },
      },
    },
  ],
}</pre>
</div>

<div class="method">
    <code class="details" id="list_next">list_next()</code>
  <pre>Retrieves the next page of results.

        Args:
          previous_request: The request for the previous page. (required)
          previous_response: The response from the request for the previous page. (required)

        Returns:
          A request object that you can call &#x27;execute()&#x27; on to request the next
          page. Returns None if there are no more items in the collection.
        </pre>
</div>

<div class="method">
    <code class="details" id="patch">patch(jobName, body=None, x__xgafv=None)</code>
  <pre>Updates a transfer job. Updating a job&#x27;s transfer spec does not affect transfer operations that are running already. **Note:** The job&#x27;s status field can be modified using this RPC (for example, to set a job&#x27;s status to DELETED, DISABLED, or ENABLED).

Args:
  jobName: string, Required. The name of job to update. (required)
  body: object, The request body.
    The object takes the form of:

{ # Request passed to UpdateTransferJob.
  &quot;projectId&quot;: &quot;A String&quot;, # Required. The ID of the Google Cloud project that owns the job.
  &quot;transferJob&quot;: { # This resource represents the configuration of a transfer job that runs periodically. # Required. The job to update. `transferJob` is expected to specify one or more of five fields: description, transfer_spec, notification_config, logging_config, and status. An `UpdateTransferJobRequest` that specifies other fields are rejected with the error INVALID_ARGUMENT. Updating a job status to DELETED requires `storagetransfer.jobs.delete` permission.
    &quot;creationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was created.
    &quot;deletionTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was deleted.
    &quot;description&quot;: &quot;A String&quot;, # A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.
    &quot;eventStream&quot;: { # Specifies the Event-driven transfer options. Event-driven transfers listen to an event stream to transfer updated files. # Specifies the event stream for the transfer job for event-driven transfers. When EventStream is specified, the Schedule fields are ignored.
      &quot;eventStreamExpirationTime&quot;: &quot;A String&quot;, # Specifies the data and time at which Storage Transfer Service stops listening for events from this stream. After this time, any transfers in progress will complete, but no new transfers are initiated.
      &quot;eventStreamStartTime&quot;: &quot;A String&quot;, # Specifies the date and time that Storage Transfer Service starts listening for events from this stream. If no start time is specified or start time is in the past, Storage Transfer Service starts listening immediately.
      &quot;name&quot;: &quot;A String&quot;, # Required. Specifies a unique name of the resource such as AWS SQS ARN in the form &#x27;arn:aws:sqs:region:account_id:queue_name&#x27;, or Pub/Sub subscription resource name in the form &#x27;projects/{project}/subscriptions/{sub}&#x27;.
    },
    &quot;lastModificationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was last modified.
    &quot;latestOperationName&quot;: &quot;A String&quot;, # The name of the most recently started TransferOperation of this JobConfig. Present if a TransferOperation has been created for this JobConfig.
    &quot;loggingConfig&quot;: { # Specifies the logging behavior for transfer operations. Logs can be sent to Cloud Logging for all transfer types. See [Read transfer logs](https://cloud.google.com/storage-transfer/docs/read-transfer-logs) for details. # Logging configuration.
      &quot;enableOnpremGcsTransferLogs&quot;: True or False, # For PosixFilesystem transfers, enables [file system transfer logs](https://cloud.google.com/storage-transfer/docs/on-prem-transfer-log-format) instead of, or in addition to, Cloud Logging. This option ignores [LoggableAction] and [LoggableActionState]. If these are set, Cloud Logging will also be enabled for this transfer.
      &quot;logActionStates&quot;: [ # States in which `log_actions` are logged. If empty, no logs are generated.
        &quot;A String&quot;,
      ],
      &quot;logActions&quot;: [ # Specifies the actions to be logged. If empty, no logs are generated.
        &quot;A String&quot;,
      ],
    },
    &quot;name&quot;: &quot;A String&quot;, # A unique name (within the transfer project) assigned when the job is created. If this field is empty in a CreateTransferJobRequest, Storage Transfer Service assigns a unique name. Otherwise, the specified name is used as the unique name for this job. If the specified name is in use by a job, the creation request fails with an ALREADY_EXISTS error. This name must start with `&quot;transferJobs/&quot;` prefix and end with a letter or a number, and should be no more than 128 characters. For transfers involving PosixFilesystem, this name must start with `transferJobs/OPI` specifically. For all other transfer types, this name must not start with `transferJobs/OPI`. Non-PosixFilesystem example: `&quot;transferJobs/^(?!OPI)[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` PosixFilesystem example: `&quot;transferJobs/OPI^[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` Applications must not rely on the enforcement of naming requirements involving OPI. Invalid job names fail with an INVALID_ARGUMENT error.
    &quot;notificationConfig&quot;: { # Specification to configure notifications published to Pub/Sub. Notifications are published to the customer-provided topic using the following `PubsubMessage.attributes`: * `&quot;eventType&quot;`: one of the EventType values * `&quot;payloadFormat&quot;`: one of the PayloadFormat values * `&quot;projectId&quot;`: the project_id of the `TransferOperation` * `&quot;transferJobName&quot;`: the transfer_job_name of the `TransferOperation` * `&quot;transferOperationName&quot;`: the name of the `TransferOperation` The `PubsubMessage.data` contains a TransferOperation resource formatted according to the specified `PayloadFormat`. # Notification configuration.
      &quot;eventTypes&quot;: [ # Event types for which a notification is desired. If empty, send notifications for all event types.
        &quot;A String&quot;,
      ],
      &quot;payloadFormat&quot;: &quot;A String&quot;, # Required. The desired format of the notification message payloads.
      &quot;pubsubTopic&quot;: &quot;A String&quot;, # Required. The `Topic.name` of the Pub/Sub topic to which to publish notifications. Must be of the format: `projects/{project}/topics/{topic}`. Not matching this format results in an INVALID_ARGUMENT error.
    },
    &quot;projectId&quot;: &quot;A String&quot;, # The ID of the Google Cloud project that owns the job.
    &quot;replicationSpec&quot;: { # Specifies the configuration for a cross-bucket replication job. Cross-bucket replication copies new or updated objects from a source Cloud Storage bucket to a destination Cloud Storage bucket. Existing objects in the source bucket are not copied by a new cross-bucket replication job. # Replication specification.
      &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket to which to replicate objects.
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
        &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
      },
      &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket from which to replicate objects.
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
        &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
      },
      &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Object conditions that determine which objects are transferred. For replication jobs, only `include_prefixes` and `exclude_prefixes` are supported.
        &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
          &quot;A String&quot;,
        ],
        &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
          &quot;A String&quot;,
        ],
        &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
        &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
        &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
        &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      },
      &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # Specifies the metadata options to be applied during replication. Delete options are not supported. If a delete option is specified, the request fails with an INVALID_ARGUMENT error.
        &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
        &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
        &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
          &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
          &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
          &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
          &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
          &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
          &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        },
        &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
        &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
      },
    },
    &quot;schedule&quot;: { # Transfers can be scheduled to recur or to run just once. # Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule.
      &quot;endTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that no further transfer operations are scheduled. Combined with schedule_end_date, `end_time_of_day` specifies the end date and time for starting new transfer operations. This field must be greater than or equal to the timestamp corresponding to the combination of schedule_start_date and start_time_of_day, and is subject to the following: * If `end_time_of_day` is not set and `schedule_end_date` is set, then a default value of `23:59:59` is used for `end_time_of_day`. * If `end_time_of_day` is set and `schedule_end_date` is not set, then INVALID_ARGUMENT is returned.
        &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
        &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
        &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
        &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
      },
      &quot;repeatInterval&quot;: &quot;A String&quot;, # Interval between the start of each scheduled TransferOperation. If unspecified, the default value is 24 hours. This value may not be less than 1 hour.
      &quot;scheduleEndDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # The last day a transfer runs. Date boundaries are determined relative to UTC time. A job runs once per 24 hours within the following guidelines: * If `schedule_end_date` and schedule_start_date are the same and in the future relative to UTC, the transfer is executed only one time. * If `schedule_end_date` is later than `schedule_start_date` and `schedule_end_date` is in the future relative to UTC, the job runs each day at start_time_of_day through `schedule_end_date`.
        &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
        &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
        &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
      },
      &quot;scheduleStartDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # Required. The start date of a transfer. Date boundaries are determined relative to UTC time. If `schedule_start_date` and start_time_of_day are in the past relative to the job&#x27;s creation time, the transfer starts the day after you schedule the transfer request. **Note:** When starting jobs at or near midnight UTC it is possible that a job starts later than expected. For example, if you send an outbound request on June 1 one millisecond prior to midnight UTC and the Storage Transfer Service server receives the request on June 2, then it creates a TransferJob with `schedule_start_date` set to June 2 and a `start_time_of_day` set to midnight UTC. The first scheduled TransferOperation takes place on June 3 at midnight UTC.
        &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
        &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
        &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
      },
      &quot;startTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that a transfer job is scheduled to run. Transfers may start later than this time. If `start_time_of_day` is not specified: * One-time transfers run immediately. * Recurring transfers run immediately, and each day at midnight UTC, through schedule_end_date. If `start_time_of_day` is specified: * One-time transfers run at the specified time. * Recurring transfers run at the specified time each day, through `schedule_end_date`.
        &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
        &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
        &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
        &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
      },
    },
    &quot;serviceAccount&quot;: &quot;A String&quot;, # Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.
    &quot;status&quot;: &quot;A String&quot;, # Status of the job. This value MUST be specified for `CreateTransferJobRequests`. **Note:** The effect of the new job status takes place during a subsequent job run. For example, if you change the job status from ENABLED to DISABLED, and an operation spawned by the transfer is running, the status change would not affect the current operation.
    &quot;transferSpec&quot;: { # Configuration for running a transfer. # Transfer specification.
      &quot;awsS3CompatibleDataSource&quot;: { # An AwsS3CompatibleData resource. # Optional. An AWS S3 compatible data source.
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. Specifies the name of the bucket.
        &quot;endpoint&quot;: &quot;A String&quot;, # Required. Specifies the endpoint of the storage service.
        &quot;path&quot;: &quot;A String&quot;, # Specifies the root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
        &quot;region&quot;: &quot;A String&quot;, # Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
        &quot;s3Metadata&quot;: { # S3CompatibleMetadata contains the metadata fields that apply to the basic types of S3-compatible data providers. # A S3 compatible metadata.
          &quot;authMethod&quot;: &quot;A String&quot;, # Specifies the authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
          &quot;listApi&quot;: &quot;A String&quot;, # The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
          &quot;protocol&quot;: &quot;A String&quot;, # Specifies the network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
          &quot;requestModel&quot;: &quot;A String&quot;, # Specifies the API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
        },
      },
      &quot;awsS3DataSource&quot;: { # An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object&#x27;s name is the S3 object&#x27;s key name. # Optional. An AWS S3 data source.
        &quot;awsAccessKey&quot;: { # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)). For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
          &quot;accessKeyId&quot;: &quot;A String&quot;, # Required. AWS access key ID.
          &quot;secretAccessKey&quot;: &quot;A String&quot;, # Required. AWS secret access key. This field is not returned in RPC responses.
        },
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. S3 Bucket name (see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/dev/create-bucket-get-location-example.html)).
        &quot;cloudfrontDomain&quot;: &quot;A String&quot;, # Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: `https://{id}.cloudfront.net` or any valid custom domain. Must begin with `https://`.
        &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { &quot;access_key_id&quot;: &quot;ACCESS_KEY_ID&quot;, &quot;secret_access_key&quot;: &quot;SECRET_ACCESS_KEY&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Amazon S3] (https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager) for more information. If `credentials_secret` is specified, do not specify role_arn or aws_access_key. Format: `projects/{project_number}/secrets/{secret_name}`
        &quot;managedPrivateNetwork&quot;: True or False, # Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
        &quot;roleArn&quot;: &quot;A String&quot;, # The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.
      },
      &quot;azureBlobStorageDataSource&quot;: { # An AzureBlobStorageData resource can be a data source, but not a data sink. An AzureBlobStorageData resource represents one Azure container. The storage account determines the [Azure endpoint](https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#storage-account-endpoints). In an AzureBlobStorageData resource, a blobs&#x27;s name is the [Azure Blob Storage blob&#x27;s key name](https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata#blob-names). # Optional. An Azure Blob Storage data source.
        &quot;azureCredentials&quot;: { # Azure credentials For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Required. Input only. Credentials used to authenticate API requests to Azure. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
          &quot;sasToken&quot;: &quot;A String&quot;, # Required. Azure shared access signature (SAS). For more information about SAS, see [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
        },
        &quot;container&quot;: &quot;A String&quot;, # Required. The container to transfer from the Azure Storage account.
        &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. The Azure SAS token must be stored in Secret Manager in JSON format: { &quot;sas_token&quot; : &quot;SAS_TOKEN&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Microsoft Azure Blob Storage] (https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#secret_manager) for more information. If `credentials_secret` is specified, do not specify azure_credentials. Format: `projects/{project_number}/secrets/{secret_name}`
        &quot;federatedIdentityConfig&quot;: { # The identity of an Azure application through which Storage Transfer Service can authenticate requests using Azure workload identity federation. Storage Transfer Service can issue requests to Azure Storage through registered Azure applications, eliminating the need to pass credentials to Storage Transfer Service directly. To configure federated identity, see [Configure access to Microsoft Azure Storage](https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#option_3_authenticate_using_federated_identity). # Optional. Federated identity config of a user registered Azure application. If `federated_identity_config` is specified, do not specify azure_credentials or credentials_secret.
          &quot;clientId&quot;: &quot;A String&quot;, # Required. The client (application) ID of the application with federated credentials.
          &quot;tenantId&quot;: &quot;A String&quot;, # Required. The tenant (directory) ID of the application with federated credentials.
        },
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
        &quot;storageAccount&quot;: &quot;A String&quot;, # Required. The name of the Azure Storage account.
      },
      &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data sink.
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
        &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
      },
      &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data source.
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
        &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
      },
      &quot;gcsIntermediateDataLocation&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # For transfers between file systems, specifies a Cloud Storage bucket to be used as an intermediate location through which to transfer data. See [Transfer data between file systems](https://cloud.google.com/storage-transfer/docs/file-to-file) for more information.
        &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
        &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
      },
      &quot;hdfsDataSource&quot;: { # An HdfsData resource specifies a path within an HDFS entity (e.g. a cluster). All cluster-specific settings, such as namenodes and ports, are configured on the transfer agents servicing requests, so HdfsData only contains the root path to the data in our transfer. # Optional. An HDFS cluster data source.
        &quot;path&quot;: &quot;A String&quot;, # Root path to transfer files.
      },
      &quot;httpDataSource&quot;: { # An HttpData resource specifies a list of objects on the web to be transferred over HTTP. The information of the objects to be transferred is contained in a file referenced by a URL. The first line in the file must be `&quot;TsvHttpData-1.0&quot;`, which specifies the format of the file. Subsequent lines specify the information of the list of objects, one object per list entry. Each entry has the following tab-delimited fields: * **HTTP URL** — The location of the object. * **Length** — The size of the object in bytes. * **MD5** — The base64-encoded MD5 hash of the object. For an example of a valid TSV file, see [Transferring data from URLs](https://cloud.google.com/storage-transfer/docs/create-url-list). When transferring data based on a URL list, keep the following in mind: * When an object located at `http(s)://hostname:port/` is transferred to a data sink, the name of the object at the data sink is `/`. * If the specified size of an object does not match the actual size of the object fetched, the object is not transferred. * If the specified MD5 does not match the MD5 computed from the transferred bytes, the object transfer fails. * Ensure that each URL you specify is publicly accessible. For example, in Cloud Storage you can [share an object publicly] (/storage/docs/cloud-console#_sharingdata) and get a link to it. * Storage Transfer Service obeys `robots.txt` rules and requires the source HTTP server to support `Range` requests and to return a `Content-Length` header in each response. * ObjectConditions have no effect when filtering objects to transfer. # Optional. An HTTP URL data source.
        &quot;listUrl&quot;: &quot;A String&quot;, # Required. The URL that points to the file that stores the object list entries. This file must allow public access. The URL is either an HTTP/HTTPS address (e.g. `https://example.com/urllist.tsv`) or a Cloud Storage path (e.g. `gs://my-bucket/urllist.tsv`).
      },
      &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Only objects that satisfy these object conditions are included in the set of data source and data sink objects. Object conditions based on objects&#x27; &quot;last modification time&quot; do not exclude objects in a data sink.
        &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
          &quot;A String&quot;,
        ],
        &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
          &quot;A String&quot;,
        ],
        &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
        &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
        &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
        &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      },
      &quot;posixDataSink&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data sink.
        &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
      },
      &quot;posixDataSource&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data source.
        &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
      },
      &quot;sinkAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data sink. When unspecified, the default name is used.
      &quot;sourceAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
      &quot;transferManifest&quot;: { # Specifies where the manifest is located. # A manifest file provides a list of objects to be transferred from the data source. This field points to the location of the manifest file. Otherwise, the entire source bucket is used. ObjectConditions still apply.
        &quot;location&quot;: &quot;A String&quot;, # Specifies the path to the manifest in Cloud Storage. The Google-managed service account for the transfer must have `storage.objects.get` permission for this object. An example path is `gs://bucket_name/path/manifest.csv`.
      },
      &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # If the option delete_objects_unique_in_sink is `true` and time-based object conditions such as &#x27;last modification time&#x27; are specified, the request fails with an INVALID_ARGUMENT error.
        &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
        &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
        &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
          &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
          &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
          &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
          &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
          &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
          &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
          &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        },
        &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
        &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
      },
    },
  },
  &quot;updateTransferJobFieldMask&quot;: &quot;A String&quot;, # The field mask of the fields in `transferJob` that are to be updated in this request. Fields in `transferJob` that can be updated are: description, transfer_spec, notification_config, logging_config, and status. To update the `transfer_spec` of the job, a complete transfer specification must be provided. An incomplete specification missing any required fields is rejected with the error INVALID_ARGUMENT.
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents the configuration of a transfer job that runs periodically.
  &quot;creationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was created.
  &quot;deletionTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was deleted.
  &quot;description&quot;: &quot;A String&quot;, # A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.
  &quot;eventStream&quot;: { # Specifies the Event-driven transfer options. Event-driven transfers listen to an event stream to transfer updated files. # Specifies the event stream for the transfer job for event-driven transfers. When EventStream is specified, the Schedule fields are ignored.
    &quot;eventStreamExpirationTime&quot;: &quot;A String&quot;, # Specifies the data and time at which Storage Transfer Service stops listening for events from this stream. After this time, any transfers in progress will complete, but no new transfers are initiated.
    &quot;eventStreamStartTime&quot;: &quot;A String&quot;, # Specifies the date and time that Storage Transfer Service starts listening for events from this stream. If no start time is specified or start time is in the past, Storage Transfer Service starts listening immediately.
    &quot;name&quot;: &quot;A String&quot;, # Required. Specifies a unique name of the resource such as AWS SQS ARN in the form &#x27;arn:aws:sqs:region:account_id:queue_name&#x27;, or Pub/Sub subscription resource name in the form &#x27;projects/{project}/subscriptions/{sub}&#x27;.
  },
  &quot;lastModificationTime&quot;: &quot;A String&quot;, # Output only. The time that the transfer job was last modified.
  &quot;latestOperationName&quot;: &quot;A String&quot;, # The name of the most recently started TransferOperation of this JobConfig. Present if a TransferOperation has been created for this JobConfig.
  &quot;loggingConfig&quot;: { # Specifies the logging behavior for transfer operations. Logs can be sent to Cloud Logging for all transfer types. See [Read transfer logs](https://cloud.google.com/storage-transfer/docs/read-transfer-logs) for details. # Logging configuration.
    &quot;enableOnpremGcsTransferLogs&quot;: True or False, # For PosixFilesystem transfers, enables [file system transfer logs](https://cloud.google.com/storage-transfer/docs/on-prem-transfer-log-format) instead of, or in addition to, Cloud Logging. This option ignores [LoggableAction] and [LoggableActionState]. If these are set, Cloud Logging will also be enabled for this transfer.
    &quot;logActionStates&quot;: [ # States in which `log_actions` are logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
    &quot;logActions&quot;: [ # Specifies the actions to be logged. If empty, no logs are generated.
      &quot;A String&quot;,
    ],
  },
  &quot;name&quot;: &quot;A String&quot;, # A unique name (within the transfer project) assigned when the job is created. If this field is empty in a CreateTransferJobRequest, Storage Transfer Service assigns a unique name. Otherwise, the specified name is used as the unique name for this job. If the specified name is in use by a job, the creation request fails with an ALREADY_EXISTS error. This name must start with `&quot;transferJobs/&quot;` prefix and end with a letter or a number, and should be no more than 128 characters. For transfers involving PosixFilesystem, this name must start with `transferJobs/OPI` specifically. For all other transfer types, this name must not start with `transferJobs/OPI`. Non-PosixFilesystem example: `&quot;transferJobs/^(?!OPI)[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` PosixFilesystem example: `&quot;transferJobs/OPI^[A-Za-z0-9-._~]*[A-Za-z0-9]$&quot;` Applications must not rely on the enforcement of naming requirements involving OPI. Invalid job names fail with an INVALID_ARGUMENT error.
  &quot;notificationConfig&quot;: { # Specification to configure notifications published to Pub/Sub. Notifications are published to the customer-provided topic using the following `PubsubMessage.attributes`: * `&quot;eventType&quot;`: one of the EventType values * `&quot;payloadFormat&quot;`: one of the PayloadFormat values * `&quot;projectId&quot;`: the project_id of the `TransferOperation` * `&quot;transferJobName&quot;`: the transfer_job_name of the `TransferOperation` * `&quot;transferOperationName&quot;`: the name of the `TransferOperation` The `PubsubMessage.data` contains a TransferOperation resource formatted according to the specified `PayloadFormat`. # Notification configuration.
    &quot;eventTypes&quot;: [ # Event types for which a notification is desired. If empty, send notifications for all event types.
      &quot;A String&quot;,
    ],
    &quot;payloadFormat&quot;: &quot;A String&quot;, # Required. The desired format of the notification message payloads.
    &quot;pubsubTopic&quot;: &quot;A String&quot;, # Required. The `Topic.name` of the Pub/Sub topic to which to publish notifications. Must be of the format: `projects/{project}/topics/{topic}`. Not matching this format results in an INVALID_ARGUMENT error.
  },
  &quot;projectId&quot;: &quot;A String&quot;, # The ID of the Google Cloud project that owns the job.
  &quot;replicationSpec&quot;: { # Specifies the configuration for a cross-bucket replication job. Cross-bucket replication copies new or updated objects from a source Cloud Storage bucket to a destination Cloud Storage bucket. Existing objects in the source bucket are not copied by a new cross-bucket replication job. # Replication specification.
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket to which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # The Cloud Storage bucket from which to replicate objects.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Object conditions that determine which objects are transferred. For replication jobs, only `include_prefixes` and `exclude_prefixes` are supported.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # Specifies the metadata options to be applied during replication. Delete options are not supported. If a delete option is specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
  &quot;schedule&quot;: { # Transfers can be scheduled to recur or to run just once. # Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule.
    &quot;endTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that no further transfer operations are scheduled. Combined with schedule_end_date, `end_time_of_day` specifies the end date and time for starting new transfer operations. This field must be greater than or equal to the timestamp corresponding to the combination of schedule_start_date and start_time_of_day, and is subject to the following: * If `end_time_of_day` is not set and `schedule_end_date` is set, then a default value of `23:59:59` is used for `end_time_of_day`. * If `end_time_of_day` is set and `schedule_end_date` is not set, then INVALID_ARGUMENT is returned.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
    &quot;repeatInterval&quot;: &quot;A String&quot;, # Interval between the start of each scheduled TransferOperation. If unspecified, the default value is 24 hours. This value may not be less than 1 hour.
    &quot;scheduleEndDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # The last day a transfer runs. Date boundaries are determined relative to UTC time. A job runs once per 24 hours within the following guidelines: * If `schedule_end_date` and schedule_start_date are the same and in the future relative to UTC, the transfer is executed only one time. * If `schedule_end_date` is later than `schedule_start_date` and `schedule_end_date` is in the future relative to UTC, the job runs each day at start_time_of_day through `schedule_end_date`.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;scheduleStartDate&quot;: { # Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp # Required. The start date of a transfer. Date boundaries are determined relative to UTC time. If `schedule_start_date` and start_time_of_day are in the past relative to the job&#x27;s creation time, the transfer starts the day after you schedule the transfer request. **Note:** When starting jobs at or near midnight UTC it is possible that a job starts later than expected. For example, if you send an outbound request on June 1 one millisecond prior to midnight UTC and the Storage Transfer Service server receives the request on June 2, then it creates a TransferJob with `schedule_start_date` set to June 2 and a `start_time_of_day` set to midnight UTC. The first scheduled TransferOperation takes place on June 3 at midnight UTC.
      &quot;day&quot;: 42, # Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn&#x27;t significant.
      &quot;month&quot;: 42, # Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
      &quot;year&quot;: 42, # Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
    },
    &quot;startTimeOfDay&quot;: { # Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`. # The time in UTC that a transfer job is scheduled to run. Transfers may start later than this time. If `start_time_of_day` is not specified: * One-time transfers run immediately. * Recurring transfers run immediately, and each day at midnight UTC, through schedule_end_date. If `start_time_of_day` is specified: * One-time transfers run at the specified time. * Recurring transfers run at the specified time each day, through `schedule_end_date`.
      &quot;hours&quot;: 42, # Hours of a day in 24 hour format. Must be greater than or equal to 0 and typically must be less than or equal to 23. An API may choose to allow the value &quot;24:00:00&quot; for scenarios like business closing time.
      &quot;minutes&quot;: 42, # Minutes of an hour. Must be greater than or equal to 0 and less than or equal to 59.
      &quot;nanos&quot;: 42, # Fractions of seconds, in nanoseconds. Must be greater than or equal to 0 and less than or equal to 999,999,999.
      &quot;seconds&quot;: 42, # Seconds of a minute. Must be greater than or equal to 0 and typically must be less than or equal to 59. An API may allow the value 60 if it allows leap-seconds.
    },
  },
  &quot;serviceAccount&quot;: &quot;A String&quot;, # Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.
  &quot;status&quot;: &quot;A String&quot;, # Status of the job. This value MUST be specified for `CreateTransferJobRequests`. **Note:** The effect of the new job status takes place during a subsequent job run. For example, if you change the job status from ENABLED to DISABLED, and an operation spawned by the transfer is running, the status change would not affect the current operation.
  &quot;transferSpec&quot;: { # Configuration for running a transfer. # Transfer specification.
    &quot;awsS3CompatibleDataSource&quot;: { # An AwsS3CompatibleData resource. # Optional. An AWS S3 compatible data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Specifies the name of the bucket.
      &quot;endpoint&quot;: &quot;A String&quot;, # Required. Specifies the endpoint of the storage service.
      &quot;path&quot;: &quot;A String&quot;, # Specifies the root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;region&quot;: &quot;A String&quot;, # Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
      &quot;s3Metadata&quot;: { # S3CompatibleMetadata contains the metadata fields that apply to the basic types of S3-compatible data providers. # A S3 compatible metadata.
        &quot;authMethod&quot;: &quot;A String&quot;, # Specifies the authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
        &quot;listApi&quot;: &quot;A String&quot;, # The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
        &quot;protocol&quot;: &quot;A String&quot;, # Specifies the network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
        &quot;requestModel&quot;: &quot;A String&quot;, # Specifies the API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
      },
    },
    &quot;awsS3DataSource&quot;: { # An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object&#x27;s name is the S3 object&#x27;s key name. # Optional. An AWS S3 data source.
      &quot;awsAccessKey&quot;: { # AWS access key (see [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)). For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;accessKeyId&quot;: &quot;A String&quot;, # Required. AWS access key ID.
        &quot;secretAccessKey&quot;: &quot;A String&quot;, # Required. AWS secret access key. This field is not returned in RPC responses.
      },
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. S3 Bucket name (see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/dev/create-bucket-get-location-example.html)).
      &quot;cloudfrontDomain&quot;: &quot;A String&quot;, # Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: `https://{id}.cloudfront.net` or any valid custom domain. Must begin with `https://`.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { &quot;access_key_id&quot;: &quot;ACCESS_KEY_ID&quot;, &quot;secret_access_key&quot;: &quot;SECRET_ACCESS_KEY&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Amazon S3] (https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager) for more information. If `credentials_secret` is specified, do not specify role_arn or aws_access_key. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;managedPrivateNetwork&quot;: True or False, # Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;roleArn&quot;: &quot;A String&quot;, # The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.
    },
    &quot;azureBlobStorageDataSource&quot;: { # An AzureBlobStorageData resource can be a data source, but not a data sink. An AzureBlobStorageData resource represents one Azure container. The storage account determines the [Azure endpoint](https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#storage-account-endpoints). In an AzureBlobStorageData resource, a blobs&#x27;s name is the [Azure Blob Storage blob&#x27;s key name](https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata#blob-names). # Optional. An Azure Blob Storage data source.
      &quot;azureCredentials&quot;: { # Azure credentials For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials). # Required. Input only. Credentials used to authenticate API requests to Azure. For information on our data retention policy for user credentials, see [User credentials](/storage-transfer/docs/data-retention#user-credentials).
        &quot;sasToken&quot;: &quot;A String&quot;, # Required. Azure shared access signature (SAS). For more information about SAS, see [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
      },
      &quot;container&quot;: &quot;A String&quot;, # Required. The container to transfer from the Azure Storage account.
      &quot;credentialsSecret&quot;: &quot;A String&quot;, # Optional. The Resource name of a secret in Secret Manager. The Azure SAS token must be stored in Secret Manager in JSON format: { &quot;sas_token&quot; : &quot;SAS_TOKEN&quot; } GoogleServiceAccount must be granted `roles/secretmanager.secretAccessor` for the resource. See [Configure access to a source: Microsoft Azure Blob Storage] (https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#secret_manager) for more information. If `credentials_secret` is specified, do not specify azure_credentials. Format: `projects/{project_number}/secrets/{secret_name}`
      &quot;federatedIdentityConfig&quot;: { # The identity of an Azure application through which Storage Transfer Service can authenticate requests using Azure workload identity federation. Storage Transfer Service can issue requests to Azure Storage through registered Azure applications, eliminating the need to pass credentials to Storage Transfer Service directly. To configure federated identity, see [Configure access to Microsoft Azure Storage](https://cloud.google.com/storage-transfer/docs/source-microsoft-azure#option_3_authenticate_using_federated_identity). # Optional. Federated identity config of a user registered Azure application. If `federated_identity_config` is specified, do not specify azure_credentials or credentials_secret.
        &quot;clientId&quot;: &quot;A String&quot;, # Required. The client (application) ID of the application with federated credentials.
        &quot;tenantId&quot;: &quot;A String&quot;, # Required. The tenant (directory) ID of the application with federated credentials.
      },
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;.
      &quot;storageAccount&quot;: &quot;A String&quot;, # Required. The name of the Azure Storage account.
    },
    &quot;gcsDataSink&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data sink.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsDataSource&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # Optional. A Cloud Storage data source.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;gcsIntermediateDataLocation&quot;: { # In a GcsData resource, an object&#x27;s name is the Cloud Storage object&#x27;s name and its &quot;last modification time&quot; refers to the object&#x27;s `updated` property of Cloud Storage objects, which changes when the content or the metadata of the object is updated. # For transfers between file systems, specifies a Cloud Storage bucket to be used as an intermediate location through which to transfer data. See [Transfer data between file systems](https://cloud.google.com/storage-transfer/docs/file-to-file) for more information.
      &quot;bucketName&quot;: &quot;A String&quot;, # Required. Cloud Storage bucket name. Must meet [Bucket Name Requirements](/storage/docs/naming#requirements).
      &quot;managedFolderTransferEnabled&quot;: True or False, # Preview. Enables the transfer of managed folders between Cloud Storage buckets. Set this option on the gcs_data_source. If set to true: - Managed folders in the source bucket are transferred to the destination bucket. - Managed folders in the destination bucket are overwritten. Other OVERWRITE options are not supported. See [Transfer Cloud Storage managed folders](/storage-transfer/docs/managed-folders).
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer objects. Must be an empty string or full path name that ends with a &#x27;/&#x27;. This field is treated as an object prefix. As such, it should generally not begin with a &#x27;/&#x27;. The root path value must meet [Object Name Requirements](/storage/docs/naming#objectnames).
    },
    &quot;hdfsDataSource&quot;: { # An HdfsData resource specifies a path within an HDFS entity (e.g. a cluster). All cluster-specific settings, such as namenodes and ports, are configured on the transfer agents servicing requests, so HdfsData only contains the root path to the data in our transfer. # Optional. An HDFS cluster data source.
      &quot;path&quot;: &quot;A String&quot;, # Root path to transfer files.
    },
    &quot;httpDataSource&quot;: { # An HttpData resource specifies a list of objects on the web to be transferred over HTTP. The information of the objects to be transferred is contained in a file referenced by a URL. The first line in the file must be `&quot;TsvHttpData-1.0&quot;`, which specifies the format of the file. Subsequent lines specify the information of the list of objects, one object per list entry. Each entry has the following tab-delimited fields: * **HTTP URL** — The location of the object. * **Length** — The size of the object in bytes. * **MD5** — The base64-encoded MD5 hash of the object. For an example of a valid TSV file, see [Transferring data from URLs](https://cloud.google.com/storage-transfer/docs/create-url-list). When transferring data based on a URL list, keep the following in mind: * When an object located at `http(s)://hostname:port/` is transferred to a data sink, the name of the object at the data sink is `/`. * If the specified size of an object does not match the actual size of the object fetched, the object is not transferred. * If the specified MD5 does not match the MD5 computed from the transferred bytes, the object transfer fails. * Ensure that each URL you specify is publicly accessible. For example, in Cloud Storage you can [share an object publicly] (/storage/docs/cloud-console#_sharingdata) and get a link to it. * Storage Transfer Service obeys `robots.txt` rules and requires the source HTTP server to support `Range` requests and to return a `Content-Length` header in each response. * ObjectConditions have no effect when filtering objects to transfer. # Optional. An HTTP URL data source.
      &quot;listUrl&quot;: &quot;A String&quot;, # Required. The URL that points to the file that stores the object list entries. This file must allow public access. The URL is either an HTTP/HTTPS address (e.g. `https://example.com/urllist.tsv`) or a Cloud Storage path (e.g. `gs://my-bucket/urllist.tsv`).
    },
    &quot;objectConditions&quot;: { # Conditions that determine which objects are transferred. Applies only to Cloud Data Sources such as S3, Azure, and Cloud Storage. The &quot;last modification time&quot; refers to the time of the last change to the object&#x27;s content or metadata — specifically, this is the `updated` property of Cloud Storage objects, the `LastModified` field of S3 objects, and the `Last-Modified` header of Azure blobs. For S3 objects, the `LastModified` value is the time the object begins uploading. If the object meets your &quot;last modification time&quot; criteria, but has not finished uploading, the object is not transferred. See [Transfer from Amazon S3 to Cloud Storage](https://cloud.google.com/storage-transfer/docs/create-transfers/agentless/s3#transfer_options) for more information. Transfers with a PosixFilesystem source or destination don&#x27;t support `ObjectConditions`. # Only objects that satisfy these object conditions are included in the set of data source and data sink objects. Object conditions based on objects&#x27; &quot;last modification time&quot; do not exclude objects in a data sink.
      &quot;excludePrefixes&quot;: [ # If you specify `exclude_prefixes`, Storage Transfer Service uses the items in the `exclude_prefixes` array to determine which objects to exclude from a transfer. Objects must not start with one of the matching `exclude_prefixes` for inclusion in a transfer. The following are requirements of `exclude_prefixes`: * Each exclude-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each exclude-prefix must omit the leading slash. For example, to exclude the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the exclude-prefix as `logs/y=2015/requests.gz`. * None of the exclude-prefix values can be empty, if specified. * Each exclude-prefix must exclude a distinct portion of the object namespace. No exclude-prefix may be a prefix of another exclude-prefix. * If include_prefixes is specified, then each exclude-prefix must start with the value of a path explicitly included by `include_prefixes`. The max size of `exclude_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;includePrefixes&quot;: [ # If you specify `include_prefixes`, Storage Transfer Service uses the items in the `include_prefixes` array to determine which objects to include in a transfer. Objects must start with one of the matching `include_prefixes` for inclusion in the transfer. If exclude_prefixes is specified, objects must not start with any of the `exclude_prefixes` specified for inclusion in the transfer. The following are requirements of `include_prefixes`: * Each include-prefix can contain any sequence of Unicode characters, to a max length of 1024 bytes when UTF8-encoded, and must not contain Carriage Return or Line Feed characters. Wildcard matching and regular expression matching are not supported. * Each include-prefix must omit the leading slash. For example, to include the object `s3://my-aws-bucket/logs/y=2015/requests.gz`, specify the include-prefix as `logs/y=2015/requests.gz`. * None of the include-prefix values can be empty, if specified. * Each include-prefix must include a distinct portion of the object namespace. No include-prefix may be a prefix of another include-prefix. The max size of `include_prefixes` is 1000. For more information, see [Filtering objects from transfers](/storage-transfer/docs/filtering-objects-from-transfers).
        &quot;A String&quot;,
      ],
      &quot;lastModifiedBefore&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; before this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred.
      &quot;lastModifiedSince&quot;: &quot;A String&quot;, # If specified, only objects with a &quot;last modification time&quot; on or after this timestamp and objects that don&#x27;t have a &quot;last modification time&quot; are transferred. The `last_modified_since` and `last_modified_before` fields can be used together for chunked data processing. For example, consider a script that processes each day&#x27;s worth of data at a time. For that you&#x27;d set each of the fields as follows: * `last_modified_since` to the start of the day * `last_modified_before` to the end of the day
      &quot;maxTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred if a specific maximum time has elapsed since the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation`and the &quot;last modification time&quot; of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
      &quot;minTimeElapsedSinceLastModification&quot;: &quot;A String&quot;, # Ensures that objects are not transferred until a specific minimum time has elapsed after the &quot;last modification time&quot;. When a TransferOperation begins, objects with a &quot;last modification time&quot; are transferred only if the elapsed time between the start_time of the `TransferOperation` and the &quot;last modification time&quot; of the object is equal to or greater than the value of min_time_elapsed_since_last_modification`. Objects that do not have a &quot;last modification time&quot; are also transferred.
    },
    &quot;posixDataSink&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data sink.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;posixDataSource&quot;: { # A POSIX filesystem resource. # Optional. A POSIX Filesystem data source.
      &quot;rootDirectory&quot;: &quot;A String&quot;, # Root directory path to the filesystem.
    },
    &quot;sinkAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data sink. When unspecified, the default name is used.
    &quot;sourceAgentPoolName&quot;: &quot;A String&quot;, # Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
    &quot;transferManifest&quot;: { # Specifies where the manifest is located. # A manifest file provides a list of objects to be transferred from the data source. This field points to the location of the manifest file. Otherwise, the entire source bucket is used. ObjectConditions still apply.
      &quot;location&quot;: &quot;A String&quot;, # Specifies the path to the manifest in Cloud Storage. The Google-managed service account for the transfer must have `storage.objects.get` permission for this object. An example path is `gs://bucket_name/path/manifest.csv`.
    },
    &quot;transferOptions&quot;: { # TransferOptions define the actions to be performed on objects in a transfer. # If the option delete_objects_unique_in_sink is `true` and time-based object conditions such as &#x27;last modification time&#x27; are specified, the request fails with an INVALID_ARGUMENT error.
      &quot;deleteObjectsFromSourceAfterTransfer&quot;: True or False, # Whether objects should be deleted from the source after they are transferred to the sink. **Note:** This option and delete_objects_unique_in_sink are mutually exclusive.
      &quot;deleteObjectsUniqueInSink&quot;: True or False, # Whether objects that exist only in the sink should be deleted. **Note:** This option and delete_objects_from_source_after_transfer are mutually exclusive.
      &quot;metadataOptions&quot;: { # Specifies the metadata options for running a transfer. # Represents the selected metadata options for a transfer job.
        &quot;acl&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s ACLs should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as ACL_DESTINATION_BUCKET_DEFAULT.
        &quot;gid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX group ID (GID) attribute should be handled by the transfer. By default, GID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;kmsKey&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s Cloud KMS customer-managed encryption key (CMEK) is preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as KMS_KEY_DESTINATION_BUCKET_DEFAULT.
        &quot;mode&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s mode attribute should be handled by the transfer. By default, mode is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;storageClass&quot;: &quot;A String&quot;, # Specifies the storage class to set on objects being transferred to Google Cloud Storage buckets. If unspecified, the default behavior is the same as STORAGE_CLASS_DESTINATION_BUCKET_DEFAULT.
        &quot;symlink&quot;: &quot;A String&quot;, # Specifies how symlinks should be handled by the transfer. By default, symlinks are not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
        &quot;temporaryHold&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s temporary hold status should be preserved for transfers between Google Cloud Storage buckets. If unspecified, the default behavior is the same as TEMPORARY_HOLD_PRESERVE.
        &quot;timeCreated&quot;: &quot;A String&quot;, # Specifies how each object&#x27;s `timeCreated` metadata is preserved for transfers. If unspecified, the default behavior is the same as TIME_CREATED_SKIP. This behavior is supported for transfers to Cloud Storage buckets from Cloud Storage, Amazon S3, S3-compatible storage, and Azure sources.
        &quot;uid&quot;: &quot;A String&quot;, # Specifies how each file&#x27;s POSIX user ID (UID) attribute should be handled by the transfer. By default, UID is not preserved. Only applicable to transfers involving POSIX file systems, and ignored for other transfers.
      },
      &quot;overwriteObjectsAlreadyExistingInSink&quot;: True or False, # When to overwrite objects that already exist in the sink. The default is that only objects that are different from the source are overwritten. If true, all objects in the sink whose name matches an object in the source are overwritten with the source object.
      &quot;overwriteWhen&quot;: &quot;A String&quot;, # When to overwrite objects that already exist in the sink. If not set, overwrite behavior is determined by overwrite_objects_already_existing_in_sink.
    },
  },
}</pre>
</div>

<div class="method">
    <code class="details" id="run">run(jobName, body=None, x__xgafv=None)</code>
  <pre>Starts a new operation for the specified transfer job. A `TransferJob` has a maximum of one active `TransferOperation`. If this method is called while a `TransferOperation` is active, an error is returned.

Args:
  jobName: string, Required. The name of the transfer job. (required)
  body: object, The request body.
    The object takes the form of:

{ # Request passed to RunTransferJob.
  &quot;projectId&quot;: &quot;A String&quot;, # Required. The ID of the Google Cloud project that owns the transfer job.
}

  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # This resource represents a long-running operation that is the result of a network API call.
  &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
  &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
    &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
    &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
      {
        &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
      },
    ],
    &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
  },
  &quot;metadata&quot;: { # Represents the transfer operation object. To request a TransferOperation object, use transferOperations.get.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
  &quot;name&quot;: &quot;A String&quot;, # The server-assigned unique name. The format of `name` is `transferOperations/some/unique/name`.
  &quot;response&quot;: { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
    &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
  },
}</pre>
</div>

</body></html>